CVE-2026-53213
Description
A flaw was found in the Linux kernel's drm/vc4 component. This vulnerability occurs due to incorrect handling of the krealloc() function's return value. If krealloc() fails and returns a null value, the original pointer to allocated memory is overwritten without proper validation, leading to a memory leak. This can result in system instability or resource exhaustion over time.
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: Unexpected State; DoS: Crash, Exit, or Restart
An unexpected return value could place the system in a state that could lead to a crash or other unintended behaviors.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
