Riskcovery

CVE-2026-46171

riscv: kvm: fix vector context allocation leak

State
Published
Severity
Not scored
Published
May 28, 2026
Updated
Oct 21, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: kvm: fix vector context allocation leak

When the second kzalloc (host_context.vector.datap) fails in kvm_riscv_vcpu_alloc_vector_context, the first allocation (guest_context.vector.datap) is leaked. Free it before returning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0f4b82579716b12bb88257bd7ea80f25c791fb2c to before 8f3a5dc4055e1001b44ca8ae2bd3eb1d07782049Affected
  • 0f4b82579716b12bb88257bd7ea80f25c791fb2c to before 70ecebe7c58ce01f8da3f513eafb51bd147b1e63Affected
  • 0f4b82579716b12bb88257bd7ea80f25c791fb2c to before bd62c0f61bc722a097417401030c596cea8e21aaAffected
  • 0f4b82579716b12bb88257bd7ea80f25c791fb2c to before 1d57ab45ec5c0e22789de793bcf2a31ad6fb7d98Affected
  • 0f4b82579716b12bb88257bd7ea80f25c791fb2c to before b7c958d7c1eb1cb9b2be7b5ee4129fcd66cec978Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.