CVE-2026-45986

kernel: crypto: ccree - fix a memory leak in cc_mac_digest()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's cryptographic module, specifically within the cc_mac_digest() function of the ccree component. This vulnerability is a memory leak that occurs when a specific mapping operation fails to release allocated memory. Over time, this unreleased memory could lead to a Denial of Service (DoS) due to resource exhaustion, impacting system stability and availability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime