CVE-2026-45950

kernel: crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's starfive_aes_aead_do_one_req() function within the crypto: starfive component. This vulnerability occurs because memory allocated for rctx->adata is not properly freed if sg_copy_to_buffer() or starfive_aes_hw_init() operations fail. This can lead to memory leaks, potentially impacting system stability and performance over time.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime