Cloudanix VulnDB

CVE-2026-93126

None

CVSS

—

EPSS

0.2%

Published

Sep 17, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A minor memory-handling mistake in certain Linux systems could slowly use up resources if the affected component is used heavily over time.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Theoretical
Impact
Denial Of Service
Component
OS kernel
Class
Other
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Failure to release a device node reference after of_parse_phandle_with_args in adsp_map_carveout causes a reference leak.

Why it matters to the business

Systems using the affected Qualcomm ADSP remoteproc driver may experience gradual kernel memory pressure or resource exhaustion over extended uptime.

How an attack unfolds

An attacker with the ability to repeatedly trigger ADSP carveout mapping operations can cause the reference count leak to accumulate, eventually leading to memory or object exhaustion.

How to fix it

Update to a Linux kernel version containing the referenced fix for remoteproc qcom_q6v5_adsp reference handling.

How to confirm the fix worked

Confirm the presence of of_node_put after of_parse_phandle_with_args in the adsp_map_carveout function and verify the kernel version includes the resolution commit.

Typical attack path

  1. Obtain local code execution or sufficient privileges to interact with the remoteproc ADSP subsystem.
  2. Repeatedly invoke code paths that call adsp_map_carveout.
  3. Accumulate unreleased device node references until kernel resources are exhausted.

How to detect it

Review kernel logs for repeated device-node allocation patterns without corresponding release messages; inspect slab or kmem caches for growth tied to of_node objects during ADSP initialization.

What your security team should do

  • Prioritize kernel updates on all devices using Qualcomm ADSP remoteproc.
  • Monitor for kernel memory or slab object growth correlated with ADSP usage.
  • Apply the fix as part of routine kernel maintenance even without active exploitation.

The record

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_q6v5_adsp: Fix reference leak for device node When calling of_parse_phandle_with_args(), the caller is responsible to call of_node_put() to release the reference of device node. In adsp_map_carveout, it does not release the reference.

Affected packages

Ecosystem Package Introduced Fixed