CVE-2026-97899 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, as well as users of the drm/i915 component, should be aware of this vulnerability and apply the patch to prevent potential memory leaks. The vulnerability affects Linux kernel developers and maintainers who use the drm/i915 component. Affected operator, platform, vulnerability-management, and security-team impact should be considered.

Why it matters

A memory leak vulnerability in the Linux kernel's drm/i915 component requires patching to prevent potential issues. Linux kernel developers and maintainers should be aware of this vulnerability and apply the patch.

• Memory leak vulnerability requires patching to prevent potential denial-of-service (DoS) or information disclosure.
• Successful exploitation requires specific conditions to be met, and the impact is currently unknown.

Technical summary

The query_perf_config_list() function in the Linux kernel's drm/i915 component has a memory leak vulnerability. When krealloc() fails, the original oa_config_ids are not freed, leading to a memory leak. This issue has been resolved through a commit that ensures proper memory management. The vulnerability requires specific conditions to be met and has been patched. Linux kernel developers and maintainers should be aware of this vulnerability and apply the patch to prevent potential memory leaks. The issue is related to the drm/i915 component and requires patching to prevent potential denial-of-service (DoS) or information disclosure.

Defensive priority

Low priority, as the vulnerability requires specific conditions to be met and has been patched.

Recommended defensive actions

• Review and apply the patch to ensure the memory leak is fixed.
• Monitor the Linux kernel and drm/i915 component for any related updates or advisories.
• Perform regular vulnerability assessments to identify potential issues.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and source references indicate a memory leak vulnerability in the Linux kernel's drm/i915 component. The issue has been patched, and the CVE record provides links to the relevant commits.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.