Description
In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Fix memory leak in query_perf_config_list()

When krealloc() fails, free the original oa_config_ids before returning
to avoid a memory leak.

(cherry picked from commit 9977e9d84f46d4f12ad35fbbc0ec4638554bce87)
Published: 2026-09-25
Score: n/a
EPSS: n/a
KEV: No
Impact: Memory leak leading to possible denial of service
Action: Apply Patch
AI Analysis

Impact

A failure in the drm/i915 module causes the kernel to leak memory when the query_perf_config_list() function is called and a reallocation fails. The leaked memory is not freed before the function returns, causing a gradual accumulation of unused memory objects. Over time this leak can degrade system performance, exhaust available memory, and potentially trigger a kernel panic if the system runs low on resources. The vulnerability is a classic memory-leak weakness and does not directly allow attackers to execute code or gain elevated privileges.

Affected Systems

The issue exists in the Linux kernel, affecting all distributions that ship the default kernel variant and use the DRM i915 driver. No specific kernel version range is listed in the provided data, so any kernel containing the unpatched drm/i915 code is potentially vulnerable.

Risk and Exploitability

The exploitability of this flaw requires the ability to invoke query_perf_config_list(), which is typically a privileged or kernel-level operation. The CVSS score is not disclosed; EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. Given the nature of the weakness, it is presumed to be a local vulnerability that can degrade availability over time rather than an immediate remote exploit.

Generated by OpenCVE AI on September 25, 2026 at 13:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply an updated Linux kernel that includes the commit fixing the memory leak
  • Reboot the system to ensure the patched kernel is active
  • Monitor system memory usage for unexpected growth as a temporary mitigation until a kernel update can be applied

Generated by OpenCVE AI on September 25, 2026 at 13:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 25 Sep 2026 13:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Fri, 25 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leak in query_perf_config_list() When krealloc() fails, free the original oa_config_ids before returning to avoid a memory leak. (cherry picked from commit 9977e9d84f46d4f12ad35fbbc0ec4638554bce87)
Title drm/i915: Fix memory leak in query_perf_config_list()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-25T10:22:27.429Z

Reserved: 2026-09-25T10:18:58.200Z

Link: CVE-2026-97899

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-25T11:17:16.677

Modified: 2026-09-25T11:17:16.677

Link: CVE-2026-97899

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-25T13:30:19Z

Weaknesses
  • CWE-401

    Missing Release of Memory after Effective Lifetime