CVE-2026-46019
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability has been identified in the Linux kernel related to a memory leak in the atmel_aes_buff_cleanup function. This function only frees one page of memory while leaving three pages unreturned, leading to a memory leak.
Risk Assessment
The memory leak can lead to increased consumption of system resources, which may affect the stability and performance of the system in the long run.
Recommendation
It is recommended to update the Linux kernel to a version that includes a fix for this issue to prevent further memory leaks.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup atmel_aes_buff_init() allocates 4 pages using __get_free_pages() with ATMEL_AES_BUFFER_ORDER, but atmel_aes_buff_cleanup() frees only the first page using free_page(), leaking the remaining 3 pages. Use free_pages() with ATMEL_AES_BUFFER_ORDER to fix the memory leak.