CVE-2026-68475

Received Received - Intake

Memory Leak in Linux Kernel Sunxi Reset Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxi_reset_init(), when ioremap() fails, the memory region obtained via request_mem_region() is not released, leading to a resource leak. Add an err_mem_region label to properly release the memory region before freeing the data structure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-68475

EUVD

EUVD-2026-59097

Affected Vendors & Products

Vendor	Product	Version / Range
sunxi	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak in the Linux kernel's sunxi reset driver. When the ioremap function fails during initialization, the code does not properly release a previously allocated memory region obtained via request_mem_region. This leads to a resource leak where memory remains reserved but unused.

Detection Guidance

This vulnerability is specific to the Linux kernel's sunxi reset driver and involves a memory leak during ioremap failure. Detection requires checking kernel logs for errors related to sunxi_reset_init() or memory region leaks. Use commands like dmesg | grep -i sunxi or journalctl -k | grep -i sunxi to inspect kernel logs for failures.

Impact Analysis

The impact is primarily on system stability and resource management. A memory leak can cause gradual depletion of available memory and system resources over time, potentially leading to performance degradation or system crashes in affected devices using the sunxi reset driver.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a resource leak in the Linux kernel's sunxi_reset_init() function due to improper memory region handling during ioremap() failure. No data exposure or privacy impact is indicated.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch the sunxi reset driver. If immediate patching is not possible, monitor for memory leaks and ensure no critical services rely on the affected driver. Reboot the system after applying updates.

Hi! I’m here to help you understand CVE-2026-68475. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70