Skip to main content

Linux Kernel EUVDEUVD-2026-38898

| CVE-2026-53030 MEDIUM
Memory Leak (CWE-401)
2026-06-24 Linux GHSA-2hwx-f32f-7qp6
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local access with low privileges required to reach driver; no confidentiality or integrity impact; availability high due to unbounded memory leak causing kernel OOM.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 22, 2026 - 20:50 vuln.today
CVSS changed
Jul 14, 2026 - 19:52 NVD
5.5 (MEDIUM)
Patch available
Jun 24, 2026 - 18:02 EUVD
CVE Published
Jun 24, 2026 - 16:29 nvd
MEDIUM 5.5
CVE Published
Jun 24, 2026 - 16:29 cve.org
UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers()

The xfer structure allocated by renesas_i3c_alloc_xfer() was never freed in the renesas_i3c_i3c_xfers() function. Use the __free(kfree) cleanup attribute to automatically free the memory when the variable goes out of scope.

AnalysisAI

Memory leak in the Linux kernel's Renesas i3c master driver causes local denial of service through kernel memory exhaustion. Specifically, the xfer structure allocated by renesas_i3c_alloc_xfer() inside renesas_i3c_i3c_xfers() is never released, allowing a local user with low privileges on affected Renesas SoC hardware to exhaust kernel memory by repeatedly triggering i3c transfers. No public exploit has been identified at time of analysis, and EPSS probability sits at 0.17% (6th percentile), reflecting low real-world exploitation interest.

Technical ContextAI

The flaw resides in the i3c (Improved Inter-Integrated Circuit) bus subsystem of the Linux kernel, specifically in the Renesas vendor driver (drivers/i3c/master/renesas/). CWE-401 (Missing Release of Memory after Effective Lifetime) describes the root cause: renesas_i3c_alloc_xfer() performs a kernel heap allocation for a transfer descriptor structure, but renesas_i3c_i3c_xfers() never calls kfree() on that pointer on any exit path - success or failure. The upstream fix introduces the __free(kfree) cleanup attribute, a modern kernel idiom that automatically invokes kfree when the variable leaves scope, eliminating the leak without requiring explicit free calls on each return path. CPE data (cpe:2.3:a:linux:linux:*) confirms only the Linux kernel product is affected, and the Renesas i3c controller is specialized embedded hardware found in Renesas SoCs.

RemediationAI

The primary fix is to upgrade to a patched Linux kernel version: 6.18.33, 7.0.10, or 7.1, all of which include the correction via the __free(kfree) cleanup attribute. Stable-tree fix commits are available at https://git.kernel.org/stable/c/1b6a7e94be678d34a9ccb9db7e2443ae02ad2bc8, https://git.kernel.org/stable/c/d7665c3b4f575251e449e2656879392346ca612b, and https://git.kernel.org/stable/c/ab8f00ffcca0f618fb8198d358f24728950d9860 for backporting to downstream trees. Ubuntu users should apply the updates referenced in USN-8568-1 (https://ubuntu.com/security/notices/USN-8568-1) and USN-8566-1 (https://ubuntu.com/security/notices/USN-8566-1). As a compensating control on systems where immediate patching is not feasible, restricting unprivileged local shell access to the system reduces exploitation opportunity, though this does not eliminate the underlying defect. Unloading or blacklisting the Renesas i3c master kernel module (if not required) would prevent the code path from being reached entirely, with the trade-off of disabling i3c device communication on the affected SoC.

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Not-Affected

Share

EUVD-2026-38898 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy