CVE-2026-45881

Analyzed Analyzed - Analysis Complete

Memory Leak in Linux Kernel SVS Driver

Publication date: 2026-05-27

Last updated on: 2026-06-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() In svs_enable_debug_write(), the buf allocated by memdup_user_nul() is leaked if kstrtoint() fails. Fix this by using __free(kfree) to automatically free buf, eliminating the need for explicit kfree() calls and preventing leaks. [Angelo: Added missing cleanup.h inclusion]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-25

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-45881

EUVD

EUVD-2026-32347

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.14 (exc)
linux	linux_kernel	From 6.19 (inc) to 6.19.4 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.128 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.75 (exc)
linux	linux_kernel	From 6.0 (inc) to 6.1.165 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak in the Linux kernel's MediaTek SVS driver, specifically in the function svs_enable_debug_write().

The issue occurs because a buffer allocated by memdup_user_nul() is not freed if the subsequent call to kstrtoint() fails, causing the memory to be leaked.

The fix involves using __free(kfree) to automatically free the buffer, preventing the memory leak by eliminating the need for explicit kfree() calls.

Impact Analysis

A memory leak in the kernel can lead to increased memory usage over time, potentially causing system instability or degraded performance.

If exploited or triggered repeatedly, it could exhaust system memory resources, possibly leading to crashes or denial of service conditions.

Mitigation Strategies

The vulnerability is fixed in the Linux kernel by correcting a memory leak in the svs_enable_debug_write() function of the mediatek svs driver.

To mitigate this vulnerability, you should update your Linux kernel to a version that includes this fix.

Hi! I’m here to help you understand CVE-2026-45881. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70