CVE-2026-93126remoteproc: qcom_q6v5_adsp: Fix reference leak for device node
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_q6v5_adsp: Fix reference leak for device node When calling of_parse_phandle_with_args(), the caller is responsible to call of_node_put() to release the reference of device node. In adsp_map_carveout, it does not release the reference.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f22eedff28aff912bde7f8deabebd121cb64fae3 before a73cfa80f1ec6b0f948cf3c91455c62423747b3e; from f22eedff28aff912bde7f8deabebd121cb64fae3 before b8bf07b031b202a93d8aa44a4a230a0bbfe0c1fc; from f22eedff28aff912bde7f8deabebd121cb64fae3 before 7420aac8b1f7e5a75a9d659be3f151dd89de6911; from f22eedff28aff912bde7f8deabebd121cb64fae3 before 5aed51501447ebb925b0ce0d7d923a9d5ce0bf9e; from f22eedff28aff912bde7f8deabebd121cb64fae3 before 8c952807c2cebd5e9e9b37146c9383229794c129 | CNA record |
References
- https://git.kernel.org/stable/c/a73cfa80f1ec6b0f948cf3c91455c62423747b3e
- https://git.kernel.org/stable/c/b8bf07b031b202a93d8aa44a4a230a0bbfe0c1fc
- https://git.kernel.org/stable/c/7420aac8b1f7e5a75a9d659be3f151dd89de6911
- https://git.kernel.org/stable/c/5aed51501447ebb925b0ce0d7d923a9d5ce0bf9e
- https://git.kernel.org/stable/c/8c952807c2cebd5e9e9b37146c9383229794c129
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.