PT-2026-43789 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-45922

NVD

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix memory leak in GET DATA DIRECT SYSFS PATH handler

The UVERBS HANDLER(MLX5 IB METHOD GET DATA DIRECT SYSFS PATH) function allocates memory for the device path using kobject get path(). If the length of the device path exceeds the output buffer length, the function returns -ENOSPC but does not free the allocated memory, resulting in a memory leak.

Add a kfree() call to the error path to ensure the allocated memory is properly freed.

Compile tested only. Issue found using a prototype static analysis tool and code review.

Related Identifiers

CVE-2026-45922

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-45922 · Security Note
• https://git.kernel.org/stable/c/b2bc649c18fbe8a7fd38d17266da3dcbfbcc44d2 · Note
• https://git.kernel.org/stable/c/b3a10eca24fcfe913c0875e620f19596001bd6dc · Note
• https://git.kernel.org/stable/c/ee998cdbff6680891b0efd9d6ce53a388e5342c3 · Note
• https://git.kernel.org/stable/c/9b9d253908478f504297ac283c514e5953ddafa6 · Note