CVE-2026-45922
kernel: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel, specifically within the RDMA/mlx5 component. When the GET_DATA_DIRECT_SYSFS_PATH handler processes a device path, it allocates memory. If the device path's length exceeds the designated output buffer, the allocated memory is not properly released. This oversight results in a memory leak, which can lead to resource exhaustion and potentially impact system stability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime