CVE-2026-23026

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the gpi peripheral config() function within the Qualcomm Generic Peripheral Interface (GPI) component of the dmaengine subsystem. The issue occurs when reallocating memory using krealloc(). If this reallocation fails, the original memory pointer gchan->config is lost, leading to a memory leak. This happens because the function directly assigns NULL to gchan->config without handling the failure of krealloc(). The fix involves using a temporary variable to store the result of krealloc() and only updating gchan->config if the allocation is successful. The issue was identified through static analysis and code review.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.