CVE-2026-45881

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() In svs_enable_debug_write(), the buf allocated by memdup_user_nul() is leaked if kstrtoint() fails. Fix this by using __free(kfree) to automatically free buf, eliminating the need for explicit kfree() calls and preventing leaks. [Angelo: Added missing cleanup.h inclusion]

Rincian

Terbit di NVD

27 Mei 2026

Terakhir diubah

25 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 5,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/06195456c4e4de3826c4ca60eca941c472f991d0 patch
• https://git.kernel.org/stable/c/0f6498077faa9cd89bb787bcc57063494a6f0601 patch
• https://git.kernel.org/stable/c/47a3e372f7d68776adb749a27c0ec9058ff1b4fd patch
• https://git.kernel.org/stable/c/6259094ee806fb813ca95894c65fb80e2ec98bf1 patch
• https://git.kernel.org/stable/c/6bb10466e0884b4a68d4a1f3f4bb87eeb471c18a patch
• https://git.kernel.org/stable/c/a58c97828911c0b6e25d6b556789da974003efda patch