CVE-2026-53213

drm/vc4: fix krealloc() memory leak

State
Published
Severity
Not scored
Published
Jun 25, 2026
Updated
Jun 25, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: fix krealloc() memory leak

Don't just overwrite the original pointer passed to krealloc() with its return value without checking latter:

MEM = krealloc(MEM, SZ, GFP);

If krealloc() returns NULL, that erases the pointer to the still allocated memory, hence leaks this memory. Instead, use a temporary variable, check it's not NULL and only then assign it to the original pointer:

TMP = krealloc(MEM, SZ, GFP); if (!TMP) return; MEM = TMP;

While on it, use krealloc_array().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6d45c81d229d71da54d374143e7d6abad4c0cf31 to before 30165a09f76eaf34951c818eb5d9d6e4771d76f6Affected
  • 6d45c81d229d71da54d374143e7d6abad4c0cf31 to before fd87d6966041e33ef7d2e5dc59f9a52b71c6ae5fAffected
  • 6d45c81d229d71da54d374143e7d6abad4c0cf31 to before e0ce103e89d61eef70edc1d1ae3bfd4c0aacbc2eAffected
  • 6d45c81d229d71da54d374143e7d6abad4c0cf31 to before c034aa0b1ba5f49cbdf8ef193d6ec714d74aac27Affected
  • 6d45c81d229d71da54d374143e7d6abad4c0cf31 to before 02f5e4db57c0cdd7bac89d503b301a093a0fa95cAffected
  • 6d45c81d229d71da54d374143e7d6abad4c0cf31 to before 4fc692dc6df5bc777cc1bcebf95179e28594875fAffected
  • 6d45c81d229d71da54d374143e7d6abad4c0cf31 to before 5d563a5da8717629ae72f9eadf1e0e340bd1658bAffected
LinuxLinux
  • 4.8Affected
  • before 4.8Not affected
  • 5.15.210 through 5.15.*Not affected
  • 6.1.176 through 6.1.*Not affected
  • 6.6.143 through 6.6.*Not affected
  • 6.12.94 through 6.12.*Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.