CVE-2026-53210 Details
Description
In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in register_shm_helper() register_shm_helper() allocates shm before calling iov_iter_npages(). If iov_iter_npages() returns 0, the function jumps to err_ctx_put and leaks shm. This can be triggered by TEE_IOC_SHM_REGISTER with struct tee_ioctl_shm_register_data where length is 0. Jump to err_free_shm instead.
A vulnerability in the Linux kernel's handling of shared memory registration can lead to memory leaks. The issue arises in the 'register_shm_helper()' function, which allocates shared memory before verifying the length of the input data. If the length is zero, the function skips the proper cleanup, causing a memory leak. This vulnerability can be triggered by the 'TEE_IOC_SHM_REGISTER' command with a specific data structure that has a length of zero.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/26682f5efc276e3ad96d102019472bfbf03833b2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4277759906b44d923a38c8f59f5576501b187b0d | kernel.org | Patch |
| https://git.kernel.org/stable/c/c10c9c48b2903f41ed4c532043b0576e86228236 | kernel.org | Patch |
| https://git.kernel.org/stable/c/dbf779db927414f5b37c1f666013e9b48a88cfde | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.8, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 2, 2026 | Initial Analysis | [email protected] |
| Jun 25, 2026 | New CVE Received | kernel.org |