CVE-2026-53213

kernel: drm/vc4: fix krealloc() memory leak

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · June 26, 2026

Description

A flaw was found in the Linux kernel's drm/vc4 component. This vulnerability occurs due to incorrect handling of the krealloc() function's return value. If krealloc() fails and returns a null value, the original pointer to allocated memory is overwritten without proper validation, leading to a memory leak. This can result in system instability or resource exhaustion over time.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-253 · Incorrect Check of Function Return Value