CVE-2026-68183: firmware: stratix10-svc: fix memory leaks and list corruption bugs

CVE-2026-68183: firmware: stratix10-svc: fix memory leaks and list corruption bugs

[Greg Kroah-Hartman]

From: Greg Kroah-Hartman <gregkh@kernel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

firmware: stratix10-svc: fix memory leaks and list corruption bugs

Fix a memory leak when gen_pool_alloc() fails by freeing pmem on the error
path. Switch pmem allocation from devm_kzalloc() to kzalloc() with
explicit kfree() in the free path to match its list-managed lifetime.
Remove the erroneous list_del(&svc_data_mem) which corrupted the list head
on failed lookups.

The Linux kernel CVE team has assigned CVE-2026-68183 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 5.0 with commit 7ca5ce896524f5292e610b27d168269e5ab74951 and fixed in 6.6.151 with commit 95f702e372964aff486338783f49e28a40a53127
	Issue introduced in 5.0 with commit 7ca5ce896524f5292e610b27d168269e5ab74951 and fixed in 6.12.101 with commit fff6e5ff0318315998b540896537eaaa2ebf9f7b
	Issue introduced in 5.0 with commit 7ca5ce896524f5292e610b27d168269e5ab74951 and fixed in 6.18.42 with commit 4f2db41a09eba7a45abd140bb86ffc519c191886
	Issue introduced in 5.0 with commit 7ca5ce896524f5292e610b27d168269e5ab74951 and fixed in 7.1.6 with commit 8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47
	Issue introduced in 5.0 with commit 7ca5ce896524f5292e610b27d168269e5ab74951 and fixed in 7.2-rc5 with commit 9119ceb76e987c2ec2b549ea100e3268ce3a1c7c

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-68183
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/firmware/stratix10-svc.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/95f702e372964aff486338783f49e28a40a53127
	https://git.kernel.org/stable/c/fff6e5ff0318315998b540896537eaaa2ebf9f7b
	https://git.kernel.org/stable/c/4f2db41a09eba7a45abd140bb86ffc519c191886
	https://git.kernel.org/stable/c/8e93a083456d78f6b0aa1f58d2b0c7071a2a7a47
	https://git.kernel.org/stable/c/9119ceb76e987c2ec2b549ea100e3268ce3a1c7c