CVE-2026-53261

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the devlink component when a devlink instance acquires a nested relation before registration but fails the probe process before reaching the devl register() function. In this scenario, specifically affecting SFs (Secondary Functions), the child devlink is linked to its parent, but a subsequent probe error triggers devlink free() directly. Because the instance was never registered, the devl unregister() function—which normally calls devlink rel put() to release the relation state—is bypassed, causing the devlink->rel variable to be leaked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.