Skip to main content

Linux Kernel CVE-2026-53065

| EUVDEUVD-2026-38933 MEDIUM
Memory Leak (CWE-401)
2026-06-24 Linux GHSA-gq3q-5vrm-rgm7
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local-only driver resource leak; low-privilege local access needed; no data exposure; availability impact from kernel memory exhaustion only.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
1.9 LOW
AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 21, 2026 - 17:41 vuln.today
CVSS changed
Jul 21, 2026 - 17:37 NVD
5.5 (MEDIUM)
Patch available
Jun 24, 2026 - 18:02 EUVD
CVE Published
Jun 24, 2026 - 16:30 cve.org
UNKNOWN (no severity yet)
CVE Published
Jun 24, 2026 - 16:30 nvd
MEDIUM 5.5

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

ASoC: sti: use managed regmap_field allocations

The regmap_field objects allocated at player init are never freed and may leak resources if the driver is removed.

Switch to devm_regmap_field_alloc() to automatically limit the lifetime of the allocations the lifetime of the device.

AnalysisAI

Resource leak in the Linux kernel ASoC STI audio driver allows a local authenticated user to exhaust kernel memory by repeatedly loading and unloading the driver, degrading system availability. The vulnerability stems from regmap_field objects allocated during STI audio player initialization never being released on driver removal. With EPSS at 0.17% (7th percentile), no KEV listing, and no public exploit, this is a low-priority maintenance fix rather than an actively weaponizable flaw. Vendor-released patches are available across multiple stable kernel branches.

Technical ContextAI

The ASoC (ALSA System on Chip) framework within the Linux kernel provides audio driver infrastructure for embedded and SoC-based hardware. The STI subsystem targets STMicroelectronics audio chipsets. The regmap_field abstraction represents bit-level fields within a hardware register map; when allocated with regmap_field_alloc(), their lifetime must be manually managed. CWE-401 (Missing Release of Memory after Effective Lifetime) describes precisely this pattern: memory that is validly allocated but never freed when the owning subsystem is torn down. The fix replaces regmap_field_alloc() with devm_regmap_field_alloc(), which binds allocation lifetime to the device's managed resource lifecycle, automatically releasing memory when the device is removed. Affected CPE is cpe:2.3:a:linux:linux:* covering all kernel versions from the introducing commit 76c2145ded6b83488dec4afc46a29a57cee90552 onward until the respective branch fix commits.

RemediationAI

Upgrade to a patched kernel version: 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10, or 7.1, as documented in the EUVD entry EUVD-2026-38933 and NVD at https://nvd.nist.gov/vuln/detail/CVE-2026-53065. Ubuntu users should apply the updates referenced in USN-8566-1, USN-8567-1, and USN-8568-1 (https://ubuntu.com/security/notices/). The precise fix commits for each stable branch are available at kernel.org: for example, https://git.kernel.org/stable/c/1696fad8b259a2d46e51cd6e17e4bcdbe02279fa. If upgrading is not immediately possible and the STI audio driver is not required, blacklisting the snd_soc_sti module (e.g., adding 'blacklist snd_soc_sti' to /etc/modprobe.d/) prevents the allocation from occurring entirely, with the trade-off of losing STMicroelectronics audio functionality. There are no other meaningful compensating controls since the leak is kernel-internal.

Vendor StatusVendor

SUSE

Severity: Low
Product Status
Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-HPC-Azure Affected
Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image SLES15-SP7-SAPCAL-Azure Image SLES15-SP7-SAPCAL-EC2 Image SLES15-SP7-SAPCAL-GCE Affected
Image SLES15-SP7-SAP-Azure Image SLES15-SP7-SAP-Azure-3P Image SLES15-SP7-SAP-BYOS-Azure Image SLES15-SP7-SAP-BYOS-EC2 Image SLES15-SP7-SAP-BYOS-GCE Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-GCE Image SLES15-SP7-SAP-Hardened-Azure Image SLES15-SP7-SAP-Hardened-BYOS-Azure Image SLES15-SP7-SAP-Hardened-BYOS-EC2 Image SLES15-SP7-SAP-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Hardened-GCE Affected
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed

Share

CVE-2026-53065 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy