Riskcovery

CVE-2026-46075

crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
Jun 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path

Unregister the hwrng to prevent new ->read() calls and flush the Atmel I2C workqueue before teardown to prevent a potential UAF if a queued callback runs while the device is being removed.

Drop the early return to ensure sysfs entries are removed and ->hwrng.priv is freed, preventing a memory leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • da001fb651b00e1deeaf24767dd691ae8152a4f5 to before 6dbeb0f788582e1ab5dfc3f41994eac0ec88c2b5Affected
  • da001fb651b00e1deeaf24767dd691ae8152a4f5 to before c5a45d14234bf26e28a89e3a5dcc08336595cf11Affected
  • da001fb651b00e1deeaf24767dd691ae8152a4f5 to before 775c00d87c385b758da9504cf053acea00e2ed40Affected
  • da001fb651b00e1deeaf24767dd691ae8152a4f5 to before 1193c12126d39bf986a5a9214827b73707b193abAffected
  • da001fb651b00e1deeaf24767dd691ae8152a4f5 to before 31901371ccd16b42d2f167b1018ba9ae8bd5a6c7Affected
  • da001fb651b00e1deeaf24767dd691ae8152a4f5 to before bab1adf3b87e4bfac92c4f5963c63db434d561c1Affected
LinuxLinux
  • 5.3Affected
  • before 5.3Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.140 through 6.6.*Not affected
  • 6.12.86 through 6.12.*Not affected
  • 6.18.27 through 6.18.*Not affected
  • 7.0.4 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.