PT-2026-44294 · Linux+1 · Linux Kernel+1

CVE-2026-46171 · Published 2026-05-28 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description A memory leak occurs in the Linux kernel within the RISC-V KVM implementation. Specifically, in the kvm riscv vcpu alloc vector context() function, if the second memory allocation for host context.vector.datap fails, the initial allocation for guest context.vector.datap is not released, leading to a leak.

Recommendations Update to a version where the kvm riscv vcpu alloc vector context() function is patched to free the guest context.vector.datap allocation upon failure. Update openSUSE Tumbleweed to version kernel-devel-7.0.11-1.1.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-46171

OESA-2026-3157

OPENSUSE-SU-2026:10954-1

USN-8566-1

USN-8568-1

USN-8569-1

USN-8593-1

USN-8603-1

USN-8618-1

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 1486

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46171.json · Exploit
• https://ubuntu.com/security/CVE-2026-53320 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63861 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53358 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-47327 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53293 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31600 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46279 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39932 · Security Note
• https://ubuntu.com/security/CVE-2026-46086 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46171 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46071 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46318 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31591 · Vendor Advisory