CVE-2026-45863
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A memory leak was found in the Linux kernel in the dw_i3c_master_i2c_xfers() function of the i3c dw driver. When pm_runtime_resume_and_get() fails, the allocated xfer structure is not freed, causing a memory leak.
Risk Assessment
The memory leak can lead to gradual exhaustion of available system memory, potentially causing system instability or denial of service (DoS) in extreme cases.
Recommendation
Apply a Linux kernel patch that adds a dw_i3c_master_free_xfer() call to the error path of the dw_i3c_master_i2c_xfers() function.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() The dw_i3c_master_i2c_xfers() function allocates memory for the xfer structure using dw_i3c_master_alloc_xfer(). If pm_runtime_resume_and_get() fails, the function returns without freeing the allocated xfer, resulting in a memory leak. Add a dw_i3c_master_free_xfer() call to the error path to ensure the allocated memory is properly freed. Compile tested only. Issue found using a prototype static analysis tool and code review.