CVE-2026-53213

drm/vc4: fix krealloc() memory leak

published June 25, 2026

CVSS
—
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: fix krealloc() memory leak

Don't just overwrite the original pointer passed to krealloc()

with its return value without checking latter:

MEM = krealloc(MEM, SZ, GFP);

If krealloc() returns NULL, that erases the pointer

to the still allocated memory, hence leaks this memory.

Instead, use a temporary variable, check it's not NULL

and only then assign it to the original pointer:

TMP = krealloc(MEM, SZ, GFP);

if (!TMP) return;

MEM = TMP;

While on it, use krealloc_array().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00123 · 1.9th percentile
Published
2026-06-25T08:39Z
EPSS history
Timeline
  • 25 JUN 08:39Z
    drm/vc4: fix krealloc() memory leak
    cvelistv5