Executive Summary

This vulnerability is a memory leak in the Linux kernel's i3c driver, specifically in the function dw_i3c_master_i2c_xfers().

The function allocates memory for a transfer structure using dw_i3c_master_alloc_xfer(). However, if the call to pm_runtime_resume_and_get() fails, the function returns without freeing the allocated memory, causing a memory leak.

The fix involves adding a call to dw_i3c_master_free_xfer() in the error path to ensure the allocated memory is properly freed.

Useful 0 Not Useful 0

Impact Analysis

This memory leak can lead to increased memory usage over time, potentially causing system instability or degraded performance if the affected function is called repeatedly and the memory is not freed.

In environments where the Linux kernel's i3c driver is used extensively, this could result in resource exhaustion or crashes.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability is a memory leak in the Linux kernel's i3c driver function dw_i3c_master_i2c_xfers(). To mitigate this issue, you should update your Linux kernel to a version where this vulnerability has been fixed.

The fix involves adding a call to dw_i3c_master_free_xfer() in the error path to ensure allocated memory is properly freed.

Since this is a kernel-level issue, applying the latest kernel patches or upgrading to a kernel version released after 2026-05-27 is recommended.

Useful 0 Not Useful 0