CVE-2026-46171
Memory Leak in Linux Kernel KVM RISC-V
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
This vulnerability can lead to a memory leak in the Linux kernel when running KVM on RISC-V architectures. Over time, repeated failures in allocation could cause increased memory usage, potentially degrading system performance or stability. However, it does not directly lead to code execution or privilege escalation.
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's RISC-V KVM (Kernel-based Virtual Machine) implementation. Specifically, it involves a memory allocation leak in the function kvm_riscv_vcpu_alloc_vector_context. When the second memory allocation (kzalloc) for host_context.vector.datap fails, the first allocation for guest_context.vector.datap is not freed, causing a memory leak. The fix involves freeing the first allocation before returning when the second allocation fails.