CVE-2026-53210 | BDVDB-2026-343228 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in register_shm_helper() register_shm_helper() allocates shm before calling iov_iter_npages(). If iov_iter_npages() returns 0, the function jumps to err_ctx_put and leaks shm. This can be triggered by TEE_IOC_SHM_REGISTER with struct tee_ioctl_shm_register_data where length is 0. Jump to err_free_shm instead.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-25Record published in the CVE List.