Skip to main content

Linux Kernel EUVDEUVD-2026-38995

| CVE-2026-53127 MEDIUM
Memory Leak (CWE-401)
2026-06-24 Linux GHSA-665r-cj9v-w263
Information Disclosure Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local-only attack requiring low-privilege access and zoned block hardware; sole impact is kernel memory exhaustion with no confidentiality or integrity effect.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.5 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 23, 2026 - 21:12 vuln.today
CVSS changed
Jul 23, 2026 - 21:07 NVD
5.5 (MEDIUM)
Patch available
Jun 24, 2026 - 18:02 EUVD
CVE Published
Jun 24, 2026 - 16:30 nvd
MEDIUM 5.5
CVE Published
Jun 24, 2026 - 16:30 cve.org
UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

block: fix zones_cond memory leak on zone revalidation error paths

When blk_revalidate_disk_zones() fails after disk_revalidate_zone_resources() has allocated args.zones_cond, the memory is leaked because no error path frees it.

AnalysisAI

Memory leak in the Linux kernel block layer's zone revalidation path allows local low-privileged users to cause kernel memory exhaustion, resulting in a denial-of-service condition. Specifically, blk_revalidate_disk_zones() fails to free the args.zones_cond allocation on error paths after disk_revalidate_zone_resources() succeeds, leaving memory unreleased. No public exploit code exists and no active exploitation has been confirmed; EPSS probability stands at 0.14% (4th percentile), consistent with a low-priority local DoS affecting niche storage configurations.

Technical ContextAI

This vulnerability resides in the Linux kernel block subsystem's zoned storage support, specifically in blk_revalidate_disk_zones(), which handles revalidation of zoned block devices such as Shingled Magnetic Recording (SMR) hard drives and NVMe Zoned Namespace (ZNS) devices. CWE-401 (Missing Release of Memory after Effective Lifetime) identifies the root cause: disk_revalidate_zone_resources() allocates args.zones_cond during zone revalidation, but when blk_revalidate_disk_zones() subsequently encounters an error, no code path in the failure branch frees that allocation. The CPE (cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*) confirms this affects the mainline Linux kernel. The fix is tracked across two stable-tree commits: 29153d128384fa7c48a8ca8d34094b1cbe2d5bdc and 2a2f520fda824b5a25c93f2249578ea150c24e06, addressing both the 6.x and 7.x stable branches.

RemediationAI

Apply the upstream kernel patches available at https://git.kernel.org/stable/c/29153d128384fa7c48a8ca8d34094b1cbe2d5bdc and https://git.kernel.org/stable/c/2a2f520fda824b5a25c93f2249578ea150c24e06, which add the missing free of args.zones_cond on error paths in blk_revalidate_disk_zones(). Upgrade to Linux 7.0.10 or 7.1 where applicable. Ubuntu users should apply the packages referenced in USN-8568-1 and USN-8566-1 via standard package management. As a compensating control for systems that cannot be patched immediately, restricting local shell access to untrusted users reduces exposure, though this trades off against legitimate operational needs. Systems without zoned block devices (SMR/ZNS hardware) are not affected by this code path and require no action.

Same weakness CWE-401 – Memory Leak

View all
CVE-2020-13934 HIGH
7.5
CVE-2016-4232 HIGH POC
7.5
CVE-2024-25450 HIGH POC
8.8
CVE-2023-33718 HIGH POC
8.8
CVE-2019-6128 HIGH POC
8.8
CVE-2026-67183 HIGH POC
8.7
CVE-2023-34451 HIGH POC
8.2
CVE-2023-41484 HIGH POC
8.1

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Not-Affected

Share

EUVD-2026-38995 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy