PT-2026-44264 · Linux · Linux Kernel
CVE-2026-46141
·
Published
2026-05-28
·
Updated
2026-07-28
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak occurs in the powerpc/xive component when allocating MSI-X vectors for an NVMe device. The system creates a
xive irq data structure and stores it in irq data->chip data. When the MSI-X irqdomain is freed, the xive irq free data() function attempts to retrieve this structure using irq get chip data(), which incorrectly looks up the data through the child domain instead of the XIVE (parent) domain. Consequently, the lookup fails and the xive irq data structure is not freed, resulting in a kmemleak (kernel memory leak). This is resolved by using irq domain get irq data() to retrieve the irq data from the correct domain and then accessing the chip data via irq data get irq chip data().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel