CVE-2026-68183

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68183", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.373Z", "datePublished": "2026-08-10T11:59:54.836Z", "dateUpdated": "2026-08-19T16:30:49.896Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-19T16:30:49.896Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: stratix10-svc: fix memory leaks and list corruption bugs\n\nFix a memory leak when gen_pool_alloc() fails by freeing pmem on the error\npath. Switch pmem allocation from devm_kzalloc() to kzalloc() with\nexplicit kfree() in the free path to match its list-managed lifetime.\nRemove the erroneous list_del(&svc_data_mem) which corrupted the list head\non failed lookups."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/firmware/stratix10-svc.c"], "versions": [{"version": "7ca5ce896524f5292e610b27d168269e5ab74951", "lessThan": "76cff60d7fcb08da537f529bf32a0927bb17265f", "status": "affected", "versionType": "git"}, {"version": "7ca5ce896524f5292e610b27d168269e5ab74951", "lessThan": "b9206568e08424fd817a4aeca4f944e241d2f530", "status": "affected", "versionType": "git"}, {"version": "7ca5ce896524f5292e610b27d168269e5ab74951", "lessThan": "5df709d59227994888d7dbb7ea6c83316f0b79c0", "status": "affected", "versionType": "git"}, {"version": "7ca5ce896524f5292e610b27d168269e5ab74951", "lessThan": "95f702e372964aff486338783f49e28a40a53127", "status": "affected", "versionType": "git"}, {"version": "7ca5ce896524f5292e610b27d168269e5ab74951", "lessThan": "fff6e5ff0318315998b540896537eaaa2ebf9f7b", "status": "affected", "versionType": "git"}, {"version": "7ca5ce896524f5292e610b27d168269e5ab74951", "lessThan": "4f2db41a09eba7a45abd140bb86ffc519c191886", "status": "affected", "versionType": "git"}, {"version": "7ca5ce896524f5292e610b27d168269e5ab74951", "lessThan": "8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47", "status": "affected", "versionType": "git"}, {"version": "7ca5ce896524f5292e610b27d168269e5ab74951", "lessThan": "9119ceb76e987c2ec2b549ea100e3268ce3a1c7c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/firmware/stratix10-svc.c"], "versions": [{"version": "5.0", "status": "affected"}, {"version": "0", "lessThan": "5.0", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.265", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.216", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.183", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.151", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "5.10.265"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "5.15.216"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "6.1.183"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "6.6.151"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/76cff60d7fcb08da537f529bf32a0927bb17265f"}, {"url": "https://git.kernel.org/stable/c/b9206568e08424fd817a4aeca4f944e241d2f530"}, {"url": "https://git.kernel.org/stable/c/5df709d59227994888d7dbb7ea6c83316f0b79c0"}, {"url": "https://git.kernel.org/stable/c/95f702e372964aff486338783f49e28a40a53127"}, {"url": "https://git.kernel.org/stable/c/fff6e5ff0318315998b540896537eaaa2ebf9f7b"}, {"url": "https://git.kernel.org/stable/c/4f2db41a09eba7a45abd140bb86ffc519c191886"}, {"url": "https://git.kernel.org/stable/c/8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47"}, {"url": "https://git.kernel.org/stable/c/9119ceb76e987c2ec2b549ea100e3268ce3a1c7c"}], "title": "firmware: stratix10-svc: fix memory leaks and list corruption bugs", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/firmware/stratix10-svc.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "76cff60d7fcb08da537f529bf32a0927bb17265f", "status": "affected", "version": "7ca5ce896524f5292e610b27d168269e5ab74951", "versionType": "git"}, {"lessThan": "b9206568e08424fd817a4aeca4f944e241d2f530", "status": "affected", "version": "7ca5ce896524f5292e610b27d168269e5ab74951", "versionType": "git"}, {"lessThan": "5df709d59227994888d7dbb7ea6c83316f0b79c0", "status": "affected", "version": "7ca5ce896524f5292e610b27d168269e5ab74951", "versionType": "git"}, {"lessThan": "95f702e372964aff486338783f49e28a40a53127", "status": "affected", "version": "7ca5ce896524f5292e610b27d168269e5ab74951", "versionType": "git"}, {"lessThan": "fff6e5ff0318315998b540896537eaaa2ebf9f7b", "status": "affected", "version": "7ca5ce896524f5292e610b27d168269e5ab74951", "versionType": "git"}, {"lessThan": "4f2db41a09eba7a45abd140bb86ffc519c191886", "status": "affected", "version": "7ca5ce896524f5292e610b27d168269e5ab74951", "versionType": "git"}, {"lessThan": "8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47", "status": "affected", "version": "7ca5ce896524f5292e610b27d168269e5ab74951", "versionType": "git"}, {"lessThan": "9119ceb76e987c2ec2b549ea100e3268ce3a1c7c", "status": "affected", "version": "7ca5ce896524f5292e610b27d168269e5ab74951", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/firmware/stratix10-svc.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.0"}, {"lessThan": "5.0", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.265", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.216", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.183", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.151", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: stratix10-svc: fix memory leaks and list corruption bugs\n\nFix a memory leak when gen_pool_alloc() fails by freeing pmem on the error\npath. Switch pmem allocation from devm_kzalloc() to kzalloc() with\nexplicit kfree() in the free path to match its list-managed lifetime.\nRemove the erroneous list_del(&svc_data_mem) which corrupted the list head\non failed lookups."}], "id": "CVE-2026-68183", "lastModified": "2026-08-19T17:20:34.470", "metrics": {}, "published": "2026-08-10T13:20:05.373", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4f2db41a09eba7a45abd140bb86ffc519c191886"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5df709d59227994888d7dbb7ea6c83316f0b79c0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/76cff60d7fcb08da537f529bf32a0927bb17265f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9119ceb76e987c2ec2b549ea100e3268ce3a1c7c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/95f702e372964aff486338783f49e28a40a53127"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b9206568e08424fd817a4aeca4f944e241d2f530"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fff6e5ff0318315998b540896537eaaa2ebf9f7b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: firmware: stratix10-svc: fix memory leaks and list corruption bugs", "id": "2513395", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513395"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nfirmware: stratix10-svc: fix memory leaks and list corruption bugs\nFix a memory leak when gen_pool_alloc() fails by freeing pmem on the error\npath. Switch pmem allocation from devm_kzalloc() to kzalloc() with\nexplicit kfree() in the free path to match its list-managed lifetime.\nRemove the erroneous list_del(&svc_data_mem) which corrupted the list head\non failed lookups.", "A flaw was found in the `stratix10-svc` firmware component of the Linux kernel. This vulnerability involves memory leaks when memory allocation fails and list corruption due to incorrect memory management and an erroneous list deletion operation. These issues could lead to system instability or a denial of service (DoS)."], "name": "CVE-2026-68183", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:enterprise_linux_nvidia:", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux for NVIDIA 26"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-08-10T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68183\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68183\nhttps://lore.kernel.org/linux-cve-announce/2026081008-CVE-2026-68183-57eb@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7ca5ce896524f5292e610b27d168269e5ab74951,95f702e372964aff486338783f49e28a40a53127)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7ca5ce896524f5292e610b27d168269e5ab74951,fff6e5ff0318315998b540896537eaaa2ebf9f7b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7ca5ce896524f5292e610b27d168269e5ab74951,4f2db41a09eba7a45abd140bb86ffc519c191886)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7ca5ce896524f5292e610b27d168269e5ab74951,8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7ca5ce896524f5292e610b27d168269e5ab74951,9119ceb76e987c2ec2b549ea100e3268ce3a1c7c)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.0"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.151,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2-rc5,7.3.0)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T18:45:16.837200+00:00", "updated": "2026-08-13T09:45:03.651162+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}