CVE-2026-68183

firmware: stratix10-svc: fix memory leaks and list corruption bugs

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: stratix10-svc: fix memory leaks and list corruption bugs

Fix a memory leak when gen_pool_alloc() fails by freeing pmem on the error path. Switch pmem allocation from devm_kzalloc() to kzalloc() with explicit kfree() in the free path to match its list-managed lifetime. Remove the erroneous list_del(&svc_data_mem) which corrupted the list head on failed lookups.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7ca5ce896524f5292e610b27d168269e5ab74951 to before 76cff60d7fcb08da537f529bf32a0927bb17265fAffected 7ca5ce896524f5292e610b27d168269e5ab74951 to before b9206568e08424fd817a4aeca4f944e241d2f530Affected 7ca5ce896524f5292e610b27d168269e5ab74951 to before 5df709d59227994888d7dbb7ea6c83316f0b79c0Affected 7ca5ce896524f5292e610b27d168269e5ab74951 to before 95f702e372964aff486338783f49e28a40a53127Affected 7ca5ce896524f5292e610b27d168269e5ab74951 to before fff6e5ff0318315998b540896537eaaa2ebf9f7bAffected 7ca5ce896524f5292e610b27d168269e5ab74951 to before 4f2db41a09eba7a45abd140bb86ffc519c191886Affected 7ca5ce896524f5292e610b27d168269e5ab74951 to before 8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47Affected 7ca5ce896524f5292e610b27d168269e5ab74951 to before 9119ceb76e987c2ec2b549ea100e3268ce3a1c7cAffected
LinuxLinux	5.0Affected before 5.0Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.151 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

7ca5ce896524f5292e610b27d168269e5ab74951 to before 76cff60d7fcb08da537f529bf32a0927bb17265fAffected
7ca5ce896524f5292e610b27d168269e5ab74951 to before b9206568e08424fd817a4aeca4f944e241d2f530Affected
7ca5ce896524f5292e610b27d168269e5ab74951 to before 5df709d59227994888d7dbb7ea6c83316f0b79c0Affected
7ca5ce896524f5292e610b27d168269e5ab74951 to before 95f702e372964aff486338783f49e28a40a53127Affected
7ca5ce896524f5292e610b27d168269e5ab74951 to before fff6e5ff0318315998b540896537eaaa2ebf9f7bAffected
7ca5ce896524f5292e610b27d168269e5ab74951 to before 4f2db41a09eba7a45abd140bb86ffc519c191886Affected
7ca5ce896524f5292e610b27d168269e5ab74951 to before 8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47Affected
7ca5ce896524f5292e610b27d168269e5ab74951 to before 9119ceb76e987c2ec2b549ea100e3268ce3a1c7cAffected

LinuxLinux

5.0Affected
before 5.0Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.151 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.