CVE-2026-53213: linux
Vulnerability summary
CVE-2026-53213 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 37 · Related 37Timeline
- 25-06-2026PublishedVulnerability first disclosed.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: fix krealloc() memory leak Don't just overwrite the original pointer passed to krealloc() with its return value without checking latter: MEM = krealloc(MEM, SZ, GFP); If krealloc() returns NULL, that erases the pointer to the still allocated memory, hence leaks this memory. Instead, use a temporary variable, check it's not NULL and only then assign it to the original pointer: TMP = krealloc(MEM, SZ, GFP); if (!TMP) return; MEM = TMP; While on it, use krealloc_array().
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
0.00 pp
From 0.12% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu167 products
- linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 6.8.0-146.146 | < 7.0.0-31.31
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 6.8.0-1066.69 | < 7.0.0-1012.12
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Chainguard13 products
- linux-aws-6.12< 6.12.95-r0
- linux-aws-6.18< 6.18.38-r0
- linux-azure-6.12< 6.12.95-r0
- linux-azure-6.18< 6.18.38-r0
- linux-gcp-6.12< 6.12.95-r0
Linux2 products
- linux≥ 6d45c81d229d71da54d374143e7d6abad4c0cf31, < 30165a09f76eaf34951c818eb5d9d6e4771d76f6 | ≥ 6d45c81d229d71da54d374143e7d6abad4c0cf31, < fd87d6966041e33ef7d2e5dc59f9a52b71c6ae5f | ≥ 6d45c81d229d71da54d374143e7d6abad4c0cf31, < e0ce103e89d61eef70edc1d1ae3bfd4c0aacbc2e | ≥ 6d45c81d229d71da54d374143e7d6abad4c0cf31, < c034aa0b1ba5f49cbdf8ef193d6ec714d74aac27 | ≥ 6d45c81d229d71da54d374143e7d6abad4c0cf31, < 02f5e4db57c0cdd7bac89d503b301a093a0fa95c | ≥ 6d45c81d229d71da54d374143e7d6abad4c0cf31, < 4fc692dc6df5bc777cc1bcebf95179e28594875f | ≥ 6d45c81d229d71da54d374143e7d6abad4c0cf31, < 5d563a5da8717629ae72f9eadf1e0e340bd1658b | 4.8
- linux_kernel≥ 4.8, < 5.15.210 | ≥ 5.16, < 6.1.176 | ≥ 6.2, < 6.6.143 | ≥ 6.7, < 6.12.94 | ≥ 6.13, < 6.18.36 | ≥ 6.19, < 7.0.13 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4 | 7.1:rc5 | 7.1:rc6 | 7.1:rc7
Debian1 product
- linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.13-1
4 vendors · 183 products
