CVE-2026-97899

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97899", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:18:58.200Z", "datePublished": "2026-09-25T10:22:27.429Z", "dateUpdated": "2026-10-19T09:10:25.686Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:10:25.686Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix memory leak in query_perf_config_list()\n\nWhen krealloc() fails, free the original oa_config_ids before returning\nto avoid a memory leak.\n\n(cherry picked from commit 9977e9d84f46d4f12ad35fbbc0ec4638554bce87)"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/i915/i915_query.c"], "versions": [{"version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "lessThan": "d60532306397233fb860860e9694f4e35abc0e80", "status": "affected", "versionType": "git"}, {"version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "lessThan": "c0c727809229119598b50aba2776d236fbaa7989", "status": "affected", "versionType": "git"}, {"version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "lessThan": "3726824aa1418594a7458721f8b8cafd5393a300", "status": "affected", "versionType": "git"}, {"version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "lessThan": "362c42720259f42abbbafa99a12cd14f74254b7c", "status": "affected", "versionType": "git"}, {"version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "lessThan": "d004303557924077a327d71c80f5863b1b9ff1d7", "status": "affected", "versionType": "git"}, {"version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "lessThan": "9ac6db531abe98adfd395fea25c00fee37de8154", "status": "affected", "versionType": "git"}, {"version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "lessThan": "59e0a04d95e160547065ab3704bd809ddf3f0e1e", "status": "affected", "versionType": "git"}, {"version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "lessThan": "cbd3dafc2003db679ccd2f6c6a2551db79657049", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/i915/i915_query.c"], "versions": [{"version": "5.5", "status": "affected"}, {"version": "0", "lessThan": "5.5", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.271", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "5.10.271"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/d60532306397233fb860860e9694f4e35abc0e80"}, {"url": "https://git.kernel.org/stable/c/c0c727809229119598b50aba2776d236fbaa7989"}, {"url": "https://git.kernel.org/stable/c/3726824aa1418594a7458721f8b8cafd5393a300"}, {"url": "https://git.kernel.org/stable/c/362c42720259f42abbbafa99a12cd14f74254b7c"}, {"url": "https://git.kernel.org/stable/c/d004303557924077a327d71c80f5863b1b9ff1d7"}, {"url": "https://git.kernel.org/stable/c/9ac6db531abe98adfd395fea25c00fee37de8154"}, {"url": "https://git.kernel.org/stable/c/59e0a04d95e160547065ab3704bd809ddf3f0e1e"}, {"url": "https://git.kernel.org/stable/c/cbd3dafc2003db679ccd2f6c6a2551db79657049"}], "title": "drm/i915: Fix memory leak in query_perf_config_list()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/i915/i915_query.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "d60532306397233fb860860e9694f4e35abc0e80", "status": "affected", "version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "versionType": "git"}, {"lessThan": "c0c727809229119598b50aba2776d236fbaa7989", "status": "affected", "version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "versionType": "git"}, {"lessThan": "3726824aa1418594a7458721f8b8cafd5393a300", "status": "affected", "version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "versionType": "git"}, {"lessThan": "362c42720259f42abbbafa99a12cd14f74254b7c", "status": "affected", "version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "versionType": "git"}, {"lessThan": "d004303557924077a327d71c80f5863b1b9ff1d7", "status": "affected", "version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "versionType": "git"}, {"lessThan": "9ac6db531abe98adfd395fea25c00fee37de8154", "status": "affected", "version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "versionType": "git"}, {"lessThan": "59e0a04d95e160547065ab3704bd809ddf3f0e1e", "status": "affected", "version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "versionType": "git"}, {"lessThan": "cbd3dafc2003db679ccd2f6c6a2551db79657049", "status": "affected", "version": "4f6ccc74a85cbb4cdd373c374dc76398dc7603a1", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/i915/i915_query.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.5"}, {"lessThan": "5.5", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.271", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix memory leak in query_perf_config_list()\n\nWhen krealloc() fails, free the original oa_config_ids before returning\nto avoid a memory leak.\n\n(cherry picked from commit 9977e9d84f46d4f12ad35fbbc0ec4638554bce87)"}], "id": "CVE-2026-97899", "lastModified": "2026-10-19T10:17:40.043", "metrics": {}, "published": "2026-09-25T11:17:16.677", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/362c42720259f42abbbafa99a12cd14f74254b7c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3726824aa1418594a7458721f8b8cafd5393a300"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/59e0a04d95e160547065ab3704bd809ddf3f0e1e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9ac6db531abe98adfd395fea25c00fee37de8154"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c0c727809229119598b50aba2776d236fbaa7989"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cbd3dafc2003db679ccd2f6c6a2551db79657049"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d004303557924077a327d71c80f5863b1b9ff1d7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d60532306397233fb860860e9694f4e35abc0e80"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: drm/i915: Fix memory leak in query_perf_config_list()", "id": "2541048", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541048"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/i915: Fix memory leak in query_perf_config_list()\nWhen krealloc() fails, free the original oa_config_ids before returning\nto avoid a memory leak.\n(cherry picked from commit 9977e9d84f46d4f12ad35fbbc0ec4638554bce87)", "A flaw was found in the Linux kernel's Intel i915 graphics driver. When handling performance configuration queries, the driver fails to properly free previously allocated memory if a memory reallocation request fails. A local user could exploit this flaw during low-memory conditions to trigger a memory leak, potentially resulting in system resource exhaustion and a denial of service (DoS)."], "name": "CVE-2026-97899", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97899\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97899\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97899.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4f6ccc74a85cbb4cdd373c374dc76398dc7603a1,d004303557924077a327d71c80f5863b1b9ff1d7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4f6ccc74a85cbb4cdd373c374dc76398dc7603a1,9ac6db531abe98adfd395fea25c00fee37de8154)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4f6ccc74a85cbb4cdd373c374dc76398dc7603a1,59e0a04d95e160547065ab3704bd809ddf3f0e1e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4f6ccc74a85cbb4cdd373c374dc76398dc7603a1,cbd3dafc2003db679ccd2f6c6a2551db79657049)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.5"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.5)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.111,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.53,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2.7,7.2.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T13:30:19.720193+00:00", "updated": "2026-10-01T09:45:04.957344+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}