Riskcovery

CVE-2026-53210

tee: shm: fix shm leak in register_shm_helper()

State
Published
Severity
Not scored
Published
Jun 25, 2026
Updated
Jun 25, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tee: shm: fix shm leak in register_shm_helper()

register_shm_helper() allocates shm before calling iov_iter_npages(). If iov_iter_npages() returns 0, the function jumps to err_ctx_put and leaks shm.

This can be triggered by TEE_IOC_SHM_REGISTER with struct tee_ioctl_shm_register_data where length is 0.

Jump to err_free_shm instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7bdee41575919773818e525ea19e54eb817770af to before 4277759906b44d923a38c8f59f5576501b187b0dAffected
  • 7bdee41575919773818e525ea19e54eb817770af to before c10c9c48b2903f41ed4c532043b0576e86228236Affected
  • 7bdee41575919773818e525ea19e54eb817770af to before dbf779db927414f5b37c1f666013e9b48a88cfdeAffected
  • 7bdee41575919773818e525ea19e54eb817770af to before 26682f5efc276e3ad96d102019472bfbf03833b2Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.94 through 6.12.*Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.