CVE-2026-45976

Analyzed Analyzed - Analysis Complete

Memory Leak in AMDGPU Linux Kernel Driver

Publication date: 2026-05-27

Last updated on: 2026-06-16

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in amdgpu_ras_init() When amdgpu_nbio_ras_sw_init() fails in amdgpu_ras_init(), the function returns directly without freeing the allocated con structure, leading to a memory leak. Fix this by jumping to the release_con label to properly clean up the allocated memory before returning the error code. Compile tested only. Issue found using a prototype static analysis tool and code review.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-16

Generated

2026-07-07

AI Q&A

2026-05-28

EPSS Evaluated

2026-07-05

NVD

CVE-2026-45976

EUVD

EUVD-2026-32260

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.14 (exc)
linux	linux_kernel	From 6.19 (inc) to 6.19.4 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.75 (exc)
linux	linux_kernel	From 6.4 (inc) to 6.6.128 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Compliance Impact

The provided information does not specify any impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Executive Summary

This vulnerability is a memory leak in the Linux kernel's amdgpu driver, specifically in the function amdgpu_ras_init(). When the function amdgpu_nbio_ras_sw_init() fails during initialization, the allocated memory for a structure (con) is not freed properly. This happens because the function returns early without releasing the allocated memory, causing a memory leak.

Impact Analysis

The impact of this vulnerability is a memory leak in the amdgpu driver within the Linux kernel. Over time, this could lead to increased memory usage and potentially degrade system performance or stability if the leaked memory accumulates. However, there is no indication of direct exploitation such as code execution or privilege escalation.

Hi! I’m here to help you understand CVE-2026-45976. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70