CVE-2026-93126

Summary

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: qcom_q6v5_adsp: Fix reference leak for device node

When calling of_parse_phandle_with_args(), the caller is responsible to call of_node_put() to release the reference of device node. In adsp_map_carveout, it does not release the reference.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf22eedff28aff912bde7f8deabebd121cb64fae3 < a73cfa80f1ec6b0f948cf3c91455c62423747b3eaffected
LinuxLinuxf22eedff28aff912bde7f8deabebd121cb64fae3 < b8bf07b031b202a93d8aa44a4a230a0bbfe0c1fcaffected
LinuxLinuxf22eedff28aff912bde7f8deabebd121cb64fae3 < 7420aac8b1f7e5a75a9d659be3f151dd89de6911affected
LinuxLinuxf22eedff28aff912bde7f8deabebd121cb64fae3 < 5aed51501447ebb925b0ce0d7d923a9d5ce0bf9eaffected
LinuxLinuxf22eedff28aff912bde7f8deabebd121cb64fae3 < 8c952807c2cebd5e9e9b37146c9383229794c129affected
LinuxLinux6.3affected
LinuxLinux0 < 6.3unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.52 <= 6.18.*unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References