PT-2026-43935 · Linux · Linux Kernel

CVE-2026-46068

·

Published

2026-05-27

·

Updated

2026-07-24

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1
Description A memory leak occurs in the Linux kernel crypto nx component. The functions nx842 crypto alloc ctx() and nx842 crypto free ctx() allocate bounce buffers using get free pages() with a specific order, but incorrectly release them using free page(). This mismatch leads to bounce buffer leaks because free page() only releases a single page instead of the full allocated order.
Recommendations Update to version 7.0.11-1.1.

Exploit

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-46068
ECHO-2982-BB15-1DB2
OPENSUSE-SU-2026:10954-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
USN-8488-1
USN-8488-2
USN-8489-1
USN-8507-1
USN-8567-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8595-1
USN-8595-2
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1

Affected Products

Linux Kernel