CVE-2026-97440

CVE-2026-97440

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: qrtr: fix node refcount leak on ctrl packet alloc failure

qrtr_send_resume_tx() calls qrtr_node_lookup() which takes a

reference on the returned node. If the subsequent call to

qrtr_alloc_ctrl_packet() fails due to memory allocation failure, the

function returns -ENOMEM without calling qrtr_node_release() to

release the node reference.

Add qrtr_node_release(node) before returning on the allocation failure

path to properly release the reference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Published
2026-09-24T21:17Z
References (7)
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 16:03Z
    net: qrtr: fix node refcount leak on ctrl packet alloc failure
    cvelistv5