Executive brief
A memory leak vulnerability was identified in the Linux kernel's Qualcomm IPC Router (QRTR) networking component. When a network node disconnects, the system fails to properly release the associated memory, which could lead to a gradual depletion of system resources. Over time, this could impact the stability or performance of devices using this specific networking protocol.
Technical details
A memory leak exists in net/qrtr/ns.c within the Linux kernel's QRTR (Qualcomm IPC Router) implementation. The nameserver (ns) fails to call kfree() on node structures and fails to remove them from the Xarray list during the execution of ctrl_cmd_bye(), even after a BYE packet is successfully processed or encounters certain errors. An attacker or a malfunctioning remote node could repeatedly trigger these packets to exhaust kernel memory. The fix ensures that xa_erase() and kfree() are called during both success and failure paths of the ctrl_cmd_bye function.
Affected products
- Linux Linux kernel Fixed in 6.8.x and other stable branches
Timeline
- 2026-04-09: other: Patch submitted by developer
- 2026-05-27: advisory: NVD advisory published
References
- https://git.kernel.org/stable/c/076e4b162d6caba12c229e7f262df5b6881162b0
- https://git.kernel.org/stable/c/154fc7fe3f62c46891c3c4302f4b5b5391c932e6
- https://git.kernel.org/stable/c/65932f5102bb5377db36c8a4f0c28179a1967a9a
- https://git.kernel.org/stable/c/68efba36446a7774ea5b971257ade049272a07ac
- https://git.kernel.org/stable/c/ff78ed177a66763085e3214d6fbe13ca8f0b3f11