CVE-2026-46019
kernel: crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's atmel-aes cryptographic driver. The atmel_aes_buff_cleanup function incorrectly deallocates memory, leading to a memory leak. Specifically, while atmel_aes_buff_init() allocates four pages of memory, atmel_aes_buff_cleanup() only frees one page, resulting in three pages of memory being leaked. This issue could potentially lead to a denial of service due to resource exhaustion over time.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-763 · Release of Invalid Pointer or Reference