CVE-2026-68183

firmware: stratix10-svc: fix memory leaks and list corruption bugs

N/A

Published: August 10, 2026 at 11:59 AM UTC

Updated: August 19, 2026 at 05:20 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when gen_pool_alloc() fails by freeing pmem on the error path. Switch pmem allocation from devm_kzalloc() to kzalloc() with explicit kfree() in the free path to match its list-managed lifetime. Remove the erroneous list_del(&svc_data_mem) which corrupted the list head on failed lookups.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.0 ≤ v < 5.10.2655.0 ≤ v < 5.15.2165.0 ≤ v < 6.1.1835.0 ≤ v < 6.12.1015.0 ≤ v < 6.18.425.0 ≤ v < 6.6.1515.0 ≤ v < 7.1.65.0 ≤ v < 7.25.07ca5ce896524f5292e610b27d168269e5ab74951

Vendor states this is fixed in 4f2db41a09eba7a45abd140bb86ffc519c191886 (fixed)

Vendor states this is fixed in 5df709d59227994888d7dbb7ea6c83316f0b79c0 (fixed)

Vendor states this is fixed in 76cff60d7fcb08da537f529bf32a0927bb17265f (fixed)

Vendor states this is fixed in 8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47 (fixed)

Vendor states this is fixed in 9119ceb76e987c2ec2b549ea100e3268ce3a1c7c (fixed)

Vendor states this is fixed in 95f702e372964aff486338783f49e28a40a53127 (fixed)

Vendor states this is fixed in b9206568e08424fd817a4aeca4f944e241d2f530 (fixed)

Vendor states this is fixed in fff6e5ff0318315998b540896537eaaa2ebf9f7b (fixed)

Vendor states this is fixed in 5.0 (unaffected)

Vendor states this is fixed in 5.10.265 (unaffected)

Vendor states this is fixed in 5.15.216 (unaffected)

Vendor states this is fixed in 6.1.183 (unaffected)