CVE-2026-68314

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mctp i3c mod init() function where the I3C bus notifier is registered and existing buses are processed using i3c for each bus locked(mctp i3c bus add new, NULL) before the I3C device driver is registered. If the i3c driver register() function fails, the system returns an error without unregistering the notifier or cleaning up the allocated mctp i3c bus objects. This results in a memory leak of the bus list and leaves the notifier pointing to a module that failed to load.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.