{"id":"CVE-2026-68183","state":"PUBLISHED","title":"firmware: stratix10-svc: fix memory leaks and list corruption bugs","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: stratix10-svc: fix memory leaks and list corruption bugs\n\nFix a memory leak when gen_pool_alloc() fails by freeing pmem on the error\npath. Switch pmem allocation from devm_kzalloc() to kzalloc() with\nexplicit kfree() in the free path to match its list-managed lifetime.\nRemove the erroneous list_del(&svc_data_mem) which corrupted the list head\non failed lookups.","publishedAt":"2026-08-10T11:59:54.836Z","updatedAt":"2026-08-19T16:30:49.896Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"76cff60d7fcb08da537f529bf32a0927bb17265f","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"b9206568e08424fd817a4aeca4f944e241d2f530","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"5df709d59227994888d7dbb7ea6c83316f0b79c0","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"95f702e372964aff486338783f49e28a40a53127","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"fff6e5ff0318315998b540896537eaaa2ebf9f7b","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"4f2db41a09eba7a45abd140bb86ffc519c191886","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"9119ceb76e987c2ec2b549ea100e3268ce3a1c7c","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/firmware/stratix10-svc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.0","versionType":"semver"},{"version":"5.10.265","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.216","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.183","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.151","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.101","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.42","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.6","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/firmware/stratix10-svc.c"]}],"references":["https://git.kernel.org/stable/c/76cff60d7fcb08da537f529bf32a0927bb17265f","https://git.kernel.org/stable/c/b9206568e08424fd817a4aeca4f944e241d2f530","https://git.kernel.org/stable/c/5df709d59227994888d7dbb7ea6c83316f0b79c0","https://git.kernel.org/stable/c/95f702e372964aff486338783f49e28a40a53127","https://git.kernel.org/stable/c/fff6e5ff0318315998b540896537eaaa2ebf9f7b","https://git.kernel.org/stable/c/4f2db41a09eba7a45abd140bb86ffc519c191886","https://git.kernel.org/stable/c/8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47","https://git.kernel.org/stable/c/9119ceb76e987c2ec2b549ea100e3268ce3a1c7c"],"weaknesses":[],"ingestedAt":"2026-10-29T20:12:49.727Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/68xxx/CVE-2026-68183.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-68183","state":"PUBLISHED","datePublished":"2026-08-10T11:59:54.836Z","dateUpdated":"2026-08-19T16:30:49.896Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-07-30T09:28:09.373Z"},"containers":{"cna":{"title":"firmware: stratix10-svc: fix memory leaks and list corruption bugs","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: stratix10-svc: fix memory leaks and list corruption bugs\n\nFix a memory leak when gen_pool_alloc() fails by freeing pmem on the error\npath. Switch pmem allocation from devm_kzalloc() to kzalloc() with\nexplicit kfree() in the free path to match its list-managed lifetime.\nRemove the erroneous list_del(&svc_data_mem) which corrupted the list head\non failed lookups."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"76cff60d7fcb08da537f529bf32a0927bb17265f","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"b9206568e08424fd817a4aeca4f944e241d2f530","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"5df709d59227994888d7dbb7ea6c83316f0b79c0","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"95f702e372964aff486338783f49e28a40a53127","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"fff6e5ff0318315998b540896537eaaa2ebf9f7b","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"4f2db41a09eba7a45abd140bb86ffc519c191886","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47","versionType":"git"},{"version":"7ca5ce896524f5292e610b27d168269e5ab74951","status":"affected","lessThan":"9119ceb76e987c2ec2b549ea100e3268ce3a1c7c","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/firmware/stratix10-svc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.0","versionType":"semver"},{"version":"5.10.265","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.216","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.183","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.151","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.101","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.42","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.6","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/firmware/stratix10-svc.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/76cff60d7fcb08da537f529bf32a0927bb17265f"},{"url":"https://git.kernel.org/stable/c/b9206568e08424fd817a4aeca4f944e241d2f530"},{"url":"https://git.kernel.org/stable/c/5df709d59227994888d7dbb7ea6c83316f0b79c0"},{"url":"https://git.kernel.org/stable/c/95f702e372964aff486338783f49e28a40a53127"},{"url":"https://git.kernel.org/stable/c/fff6e5ff0318315998b540896537eaaa2ebf9f7b"},{"url":"https://git.kernel.org/stable/c/4f2db41a09eba7a45abd140bb86ffc519c191886"},{"url":"https://git.kernel.org/stable/c/8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47"},{"url":"https://git.kernel.org/stable/c/9119ceb76e987c2ec2b549ea100e3268ce3a1c7c"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-08-19T16:30:49.896Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.10.265"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.15.216"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"6.1.183"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"6.6.151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"6.12.101"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"6.18.42"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"7.1.6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"7.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}