CVE-2026-53213

Analyzed Analyzed - Analysis Complete

Memory Leak in Linux Kernel DRM VC4 Driver

Publication date: 2026-06-25

Last updated on: 2026-07-02

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: fix krealloc() memory leak Don't just overwrite the original pointer passed to krealloc() with its return value without checking latter: MEM = krealloc(MEM, SZ, GFP); If krealloc() returns NULL, that erases the pointer to the still allocated memory, hence leaks this memory. Instead, use a temporary variable, check it's not NULL and only then assign it to the original pointer: TMP = krealloc(MEM, SZ, GFP); if (!TMP) return; MEM = TMP; While on it, use krealloc_array().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-25

Last Modified

2026-07-02

Generated

2026-07-15

AI Q&A

2026-06-25

EPSS Evaluated

2026-07-14

NVD

CVE-2026-53213

EUVD

EUVD-2026-39304

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 5.16 (inc) to 6.1.176 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.143 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.36 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.94 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.13 (exc)
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 4.8 (inc) to 5.15.210 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak issue in the Linux kernel's drm/vc4 component related to the use of the krealloc() function.

The problem occurs because the original pointer passed to krealloc() is overwritten directly with the return value without checking if krealloc() returned NULL.

If krealloc() returns NULL, the original pointer to the still allocated memory is lost, causing a memory leak.

The fix involves using a temporary variable to store the return value of krealloc(), checking if it is NULL, and only then assigning it back to the original pointer.

Impact Analysis

This vulnerability can lead to memory leaks in the Linux kernel, which may cause increased memory usage over time.

Memory leaks can degrade system performance, potentially leading to system instability or crashes if memory exhaustion occurs.

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version where the drm/vc4 krealloc() memory leak has been fixed.

The fix involves changing the code to avoid overwriting the original pointer passed to krealloc() without checking if the return value is NULL. Instead, use a temporary variable to hold the return value of krealloc(), check if it is NULL, and only then assign it to the original pointer.

Additionally, use krealloc_array() instead of krealloc() where appropriate.

Hi! I’m here to help you understand CVE-2026-53213. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70