CVE-2026-45900
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
27/05/2026
Última modificación:
24/06/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
crypto: caam - fix netdev memory leak in dpaa2_caam_probe<br />
<br />
When commit 0e1a4d427f58 ("crypto: caam: Unembed net_dev structure in<br />
dpaa2") converted embedded net_device to dynamically allocated pointers,<br />
it added cleanup in dpaa2_dpseci_disable() but missed adding cleanup in<br />
dpaa2_dpseci_free() for error paths.<br />
<br />
This causes memory leaks when dpaa2_dpseci_dpio_setup() fails during probe<br />
due to DPIO devices not being ready yet. The kernel&#39;s deferred probe<br />
mechanism handles the retry successfully, but the netdevs allocated during<br />
the failed probe attempt are never freed, resulting in kmemleak reports<br />
showing multiple leaked netdev-related allocations all traced back to<br />
dpaa2_caam_probe().<br />
<br />
Fix this by preserving the CPU mask of allocated netdevs during setup and<br />
using it for cleanup in dpaa2_dpseci_free(). This approach ensures that<br />
only the CPUs that actually had netdevs allocated will be cleaned up,<br />
avoiding potential issues with CPU hotplug scenarios.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11 (incluyendo) | 6.12.75 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (incluyendo) | 6.18.14 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 6.19.4 (excluyendo) |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



