CVE-2026-68314
kernel: net: mctp i3c: clean up notifier and buses if driver register fails
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · August 10, 2026
Updated · October 15, 2026
Description
A flaw was found in the Linux kernel's MCTP I3C network module. When the i3c_driver_register() function fails during module initialization, the system does not properly unregister notifiers and deallocate bus objects. This oversight leads to a memory leak, which could be exploited by a local attacker to cause a Denial of Service (DoS) due to resource exhaustion.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime