CVE-2026-97440

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-97440
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97440.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97440
Downstream
Published
2026-09-24T16:03:53Z
Modified
2026-10-05T02:30:55Z
Summary
net: qrtr: fix node refcount leak on ctrl packet alloc failure
Details

In the Linux kernel, the following vulnerability has been resolved:

net: qrtr: fix node refcount leak on ctrl packet alloc failure

qrtr_send_resume_tx() calls qrtr_node_lookup() which takes a reference on the returned node. If the subsequent call to qrtr_alloc_ctrl_packet() fails due to memory allocation failure, the function returns -ENOMEM without calling qrtr_node_release() to release the node reference.

Add qrtr_node_release(node) before returning on the allocation failure path to properly release the reference.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97440.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cb6530b99fafea6c0636c4640bd21301d12cdbc9
Fixed
78d066ecac9ce50441d4affae0df2093c4c3e62e
Fixed
f3e90fbcd2d5ec1632bc2e8cdd1218f56bcb5fcf
Fixed
c3515740174b778d0ee44acc477b51a6478da6b8
Fixed
f76a39c45182d9137e053081cee9f2c197404ce6
Fixed
477353db343663d5502ca442c6de785d2f23f273
Fixed
9d969c98732a4d42212ec580dd5bbad53f246103
Fixed
3b09ff54114566864eea59020f6b69c5bb325b9d

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97440.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.6.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97440.json"