In the Linux kernel, the following vulnerability has been resolved: drm/vc4: fix krealloc() memory leak Don't just overwrite the original pointer passed to krealloc() with its return value without checking latter: MEM = krealloc(MEM, SZ, GFP); If krealloc() returns NULL, that erases the pointer to the still allocated memory, hence leaks this memory. Instead, use a temporary variable, check it's not NULL and only then assign it to the original pointer: TMP = krealloc(MEM, SZ, GFP); if (!TMP) return; MEM = TMP; While on it, use krealloc_array().

A flaw was found in the Linux kernel's `drm/vc4` component. This vulnerability occurs due to incorrect handling of the `krealloc()` function's return value. If `krealloc()` fails and returns a null value, the original pointer to allocated memory is overwritten without proper validation, leading to a memory leak. This can result in system instability or resource exhaustion over time.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-53213 https://nvd.nist.gov/vuln/detail/CVE-2026-53213 https://lore.kernel.org/linux-cve-announce/2026062503-CVE-2026-53213-e52f@gregkh/T