CVE-2026-97899drm/i915: Fix memory leak in query_perf_config_list()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leak in query_perf_config_list() When krealloc() fails, free the original oa_config_ids before returning to avoid a memory leak. (cherry picked from commit 9977e9d84f46d4f12ad35fbbc0ec4638554bce87)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4f6ccc74a85cbb4cdd373c374dc76398dc7603a1 before d60532306397233fb860860e9694f4e35abc0e80; from 4f6ccc74a85cbb4cdd373c374dc76398dc7603a1 before c0c727809229119598b50aba2776d236fbaa7989; from 4f6ccc74a85cbb4cdd373c374dc76398dc7603a1 before 3726824aa1418594a7458721f8b8cafd5393a300; from 4f6ccc74a85cbb4cdd373c374dc76398dc7603a1 before 362c42720259f42abbbafa99a12cd14f74254b7c; from 4f6ccc74a85cbb4cdd373c374dc76398dc7603a1 before d004303557924077a327d71c80f5863b1b9ff1d7; from 4f6ccc74a85cbb4cdd373c374dc76398dc7603a1 before 9ac6db531abe98adfd395fea25c00fee37de8154; from 4f6ccc74a85cbb4cdd373c374dc76398dc7603a1 before 59e0a04d95e160547065ab3704bd809ddf3f0e1e; from 4f6ccc74a85cbb4cdd373c374dc76398dc7603a1 before cbd3dafc2003db679ccd2f6c6a2551db79657049 | CNA record |
References
- https://git.kernel.org/stable/c/d60532306397233fb860860e9694f4e35abc0e80
- https://git.kernel.org/stable/c/c0c727809229119598b50aba2776d236fbaa7989
- https://git.kernel.org/stable/c/3726824aa1418594a7458721f8b8cafd5393a300
- https://git.kernel.org/stable/c/362c42720259f42abbbafa99a12cd14f74254b7c
- https://git.kernel.org/stable/c/d004303557924077a327d71c80f5863b1b9ff1d7
- https://git.kernel.org/stable/c/9ac6db531abe98adfd395fea25c00fee37de8154
- https://git.kernel.org/stable/c/59e0a04d95e160547065ab3704bd809ddf3f0e1e
- https://git.kernel.org/stable/c/cbd3dafc2003db679ccd2f6c6a2551db79657049
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.