CVE-2026-68183
Received Received - Intake

Memory Leak Fix in Stratix10 SVC Firmware

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when gen_pool_alloc() fails by freeing pmem on the error path. Switch pmem allocation from devm_kzalloc() to kzalloc() with explicit kfree() in the free path to match its list-managed lifetime. Remove the erroneous list_del(&svc_data_mem) which corrupted the list head on failed lookups.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68183
EUVD
EUVD-2026-55284

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
stratix10-svc firmware *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves memory leaks and list corruption in the stratix10-svc firmware component. It occurs when gen_pool_alloc() fails, leading to improper cleanup of allocated memory. The fix changes memory allocation from devm_kzalloc() to kzalloc() with explicit kfree() to properly manage memory. Additionally, a bug causing list corruption via erroneous list_del(&svc_data_mem) on failed lookups is removed.

Detection Guidance

This vulnerability is specific to the Linux kernel's stratix10-svc firmware component and involves memory leaks and list corruption. Detection requires checking for kernel logs or memory usage patterns related to the stratix10-svc module. Commands like dmesg, journalctl, or checking memory usage with tools like top or ps may help identify abnormal behavior.

Impact Analysis

This vulnerability could lead to system instability or crashes due to memory leaks and corrupted data structures. It may cause unexpected behavior in systems using the stratix10-svc firmware, potentially disrupting services that rely on this component.

Mitigation Strategies

Apply the latest Linux kernel updates that include the fix for this vulnerability. Reboot the system if necessary to ensure the updated kernel is active. Monitor system logs for any signs of memory leaks or list corruption after applying the patch.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68183. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart