Executive brief
A vulnerability in the Linux kernel's Qualcomm IPC Router (QRTR) networking component could allow a malicious user to crash the system. By registering an unlimited number of fake network nodes, an attacker can consume all available system memory. This results in a denial-of-service condition, impacting the availability of the affected device.
Technical details
A resource exhaustion vulnerability exists in the Linux kernel's QRTR (Qualcomm IPC Router) nameservice (net/qrtr/ns.c). The nameserver component did not previously enforce a limit on the number of nodes it tracked in its internal tree. A local attacker or malicious client can exploit this by repeatedly registering random node IDs, causing the kernel to allocate memory for each new node until system memory is exhausted. The fix introduces a hard limit of 64 nodes (QRTR_NS_MAX_NODES) and implements a counter to track and reject registrations exceeding this threshold.
Affected products
- Linux Linux kernel Fixed in 27d5e84e810b0849d08b9aec68e48570461ce313, 4665a29c08e1b36bc9db4814f9dde3d23e8fd1b0, 4c46413661431aa60fb134cd4ecdf8beaa39f824, 5cf6d5e5e3b804a44692fbf548a5179442e2e923, 8022876894d09ae485b499058c3357da683bcc5d
Timeline
- 2026-05-27: disclosed: Initial publication date
- 2026-05-27: advisory: NVD advisory published
References
- https://git.kernel.org/stable/c/27d5e84e810b0849d08b9aec68e48570461ce313
- https://git.kernel.org/stable/c/4665a29c08e1b36bc9db4814f9dde3d23e8fd1b0
- https://git.kernel.org/stable/c/4c46413661431aa60fb134cd4ecdf8beaa39f824
- https://git.kernel.org/stable/c/5cf6d5e5e3b804a44692fbf548a5179442e2e923
- https://git.kernel.org/stable/c/8022876894d09ae485b499058c3357da683bcc5d