CVE-2026-93126 PUBLISHED

remoteproc: qcom_q6v5_adsp: Fix reference leak for device node

Assigner: Linux
Reserved: 17.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: qcom_q6v5_adsp: Fix reference leak for device node

When calling of_parse_phandle_with_args(), the caller is responsible to call of_node_put() to release the reference of device node. In adsp_map_carveout, it does not release the reference.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from f22eedff28aff912bde7f8deabebd121cb64fae3 to a73cfa80f1ec6b0f948cf3c91455c62423747b3e (excl.)
  • affected from f22eedff28aff912bde7f8deabebd121cb64fae3 to b8bf07b031b202a93d8aa44a4a230a0bbfe0c1fc (excl.)
  • affected from f22eedff28aff912bde7f8deabebd121cb64fae3 to 7420aac8b1f7e5a75a9d659be3f151dd89de6911 (excl.)
  • affected from f22eedff28aff912bde7f8deabebd121cb64fae3 to 5aed51501447ebb925b0ce0d7d923a9d5ce0bf9e (excl.)
  • affected from f22eedff28aff912bde7f8deabebd121cb64fae3 to 8c952807c2cebd5e9e9b37146c9383229794c129 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.3 is affected
  • unaffected from 0 to 6.3 (excl.)
  • unaffected from 6.6.157 to 6.6.* (incl.)
  • unaffected from 6.12.110 to 6.12.* (incl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References