firmware: stratix10-svc: fix memory leaks and list corruption bugs (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.21 % · centile 11 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when gen_pool_alloc() fails by freeing pmem on the error path. Switch pmem allocation from devm_kzalloc() to kzalloc() with explicit kfree() in the free path to match its list-managed lifetime. Remove the erroneous list_del(&svc_data_mem) which corrupted the list head on failed lookups.
Références
- https://git.kernel.org/stable/c/76cff60d7fcb08da537f529bf32a0927bb17265f
- https://git.kernel.org/stable/c/b9206568e08424fd817a4aeca4f944e241d2f530
- https://git.kernel.org/stable/c/5df709d59227994888d7dbb7ea6c83316f0b79c0
- https://git.kernel.org/stable/c/95f702e372964aff486338783f49e28a40a53127
- https://git.kernel.org/stable/c/fff6e5ff0318315998b540896537eaaa2ebf9f7b
- https://git.kernel.org/stable/c/4f2db41a09eba7a45abd140bb86ffc519c191886
- https://git.kernel.org/stable/c/8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47
- https://git.kernel.org/stable/c/9119ceb76e987c2ec2b549ea100e3268ce3a1c7c
Références européennes
- ENISA EUVD · EUVD-2026-55284
- GCVE · GCVE-0-2026-68183
Avis du CERT-FR
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1255 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1069 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 7ca5ce896524f5292e610b27d168269e5ab74951 < 76cff60d7fcb08da537f529bf32a0927bb17265f ; affected 7ca5ce896524f5292e610b27d168269e5ab74951 < b9206568e08424fd817a4aeca4f944e241d2f530 ; affected 7ca5ce896524f5292e610b27d168269e5ab74951 < 5df709d59227994888d7dbb7ea6c83316f0b79c0 ; affected 7ca5ce896524f5292e610b27d168269e5ab74951 < 95f702e372964aff486338783f49e28a40a53127 ; affected 7ca5ce896524f5292e610b27d168269e5ab74951 < fff6e5ff0318315998b540896537eaaa2ebf9f7b ; affected 7ca5ce896524f5292e610b27d168269e5ab74951 < 4f2db41a09eba7a45abd140bb86ffc519c191886 |
| Linux · Linux | affected 5.0 ; unaffected 0 < 5.0 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.151 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |