CVE-2026-46019

crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup

State: Published
Severity: Not scored
Published: May 27, 2026
Updated: Jun 14, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup

atmel_aes_buff_init() allocates 4 pages using __get_free_pages() with ATMEL_AES_BUFFER_ORDER, but atmel_aes_buff_cleanup() frees only the first page using free_page(), leaking the remaining 3 pages. Use free_pages() with ATMEL_AES_BUFFER_ORDER to fix the memory leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bbe628ed897d728d38c4035381d12b2f308fac6f to before de6952e0af2acbada900d742437e848285c01d11Affected bbe628ed897d728d38c4035381d12b2f308fac6f to before 5ad40cde96d603a88d68f8ed59f6d36407ab1f3cAffected bbe628ed897d728d38c4035381d12b2f308fac6f to before 03e00aafa5f747d07811589e8d5fee638245431bAffected bbe628ed897d728d38c4035381d12b2f308fac6f to before b63f1e2f0e319ad3fe4a58eb3db4fd50cc98bacaAffected bbe628ed897d728d38c4035381d12b2f308fac6f to before 65b3589d39d05699c3850202f8333e5361033ea3Affected bbe628ed897d728d38c4035381d12b2f308fac6f to before 61516b4a5b2647dc3f8f67b5dffaf038be997511Affected bbe628ed897d728d38c4035381d12b2f308fac6f to before 230ad8a78fe67266b1ba4685da1abdd61471c5b8Affected bbe628ed897d728d38c4035381d12b2f308fac6f to before 3fcfff4ed35f963380a68741bcd52742baff7f76Affected
LinuxLinux	4.5Affected before 4.5Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.86 through 6.12.Not affected 6.18.27 through 6.18.Not affected 7.0.4 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

bbe628ed897d728d38c4035381d12b2f308fac6f to before de6952e0af2acbada900d742437e848285c01d11Affected
bbe628ed897d728d38c4035381d12b2f308fac6f to before 5ad40cde96d603a88d68f8ed59f6d36407ab1f3cAffected
bbe628ed897d728d38c4035381d12b2f308fac6f to before 03e00aafa5f747d07811589e8d5fee638245431bAffected
bbe628ed897d728d38c4035381d12b2f308fac6f to before b63f1e2f0e319ad3fe4a58eb3db4fd50cc98bacaAffected
bbe628ed897d728d38c4035381d12b2f308fac6f to before 65b3589d39d05699c3850202f8333e5361033ea3Affected
bbe628ed897d728d38c4035381d12b2f308fac6f to before 61516b4a5b2647dc3f8f67b5dffaf038be997511Affected
bbe628ed897d728d38c4035381d12b2f308fac6f to before 230ad8a78fe67266b1ba4685da1abdd61471c5b8Affected
bbe628ed897d728d38c4035381d12b2f308fac6f to before 3fcfff4ed35f963380a68741bcd52742baff7f76Affected

LinuxLinux

4.5Affected
before 4.5Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.86 through 6.12.*Not affected
6.18.27 through 6.18.*Not affected
7.0.4 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.