Skip to main content

Linux Kernel CVE-2026-45976

| EUVDEUVD-2026-32260 MEDIUM
Memory Leak (CWE-401)
2026-05-27 416baaa9-dc9f-4396-8d5f-8c081fb06d67 GHSA-x3wv-3wj6-mvvv
Linux Information Disclosure Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local low-privilege access required; AMD GPU hardware and active RAS subsystem are prerequisites; no confidentiality or integrity pathway exists - availability impact only from cumulative memory leak.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
2.3 LOW
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jun 16, 2026 - 02:56 vuln.today
CVSS changed
Jun 16, 2026 - 02:52 NVD
5.5 (MEDIUM)
Patch available
May 27, 2026 - 19:46 EUVD
CVE Published
May 27, 2026 - 14:17 nvd
MEDIUM 5.5
CVE Published
May 27, 2026 - 14:17 nvd
UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix memory leak in amdgpu_ras_init()

When amdgpu_nbio_ras_sw_init() fails in amdgpu_ras_init(), the function returns directly without freeing the allocated con structure, leading to a memory leak.

Fix this by jumping to the release_con label to properly clean up the allocated memory before returning the error code.

Compile tested only. Issue found using a prototype static analysis tool and code review.

AnalysisAI

Memory leak in the Linux kernel's amdgpu DRM driver allows a local low-privileged user to gradually exhaust kernel memory on systems equipped with AMD GPUs. The flaw exists in amdgpu_ras_init(), where a failed call to amdgpu_nbio_ras_sw_init() causes the function to return an error without freeing the previously allocated 'con' context structure, bypassing the existing release_con cleanup label. No public exploit exists and EPSS is 0.02% (5th percentile), classifying this as a low-priority maintenance fix with no confirmed active exploitation.

Technical ContextAI

The vulnerability is located within the Direct Rendering Manager (DRM) subsystem of the Linux kernel, specifically in the AMD GPU (amdgpu) driver's Reliability, Availability, and Serviceability (RAS) initialization routine. CWE-401 (Missing Release of Memory after Effective Lifetime) is the root cause: the function amdgpu_ras_init() allocates a heap-resident 'con' (RAS context) structure but fails to route the error path through the existing 'release_con' label when the subordinate call amdgpu_nbio_ras_sw_init() fails, causing the allocated memory to become permanently unreachable. The affected CPE is cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*, covering all kernel trees that include the introducing commit fdc94d3a8c887e4e06a7ff8dcb51d55cd70e16cf. The bug was found via a prototype static analysis tool and code review - not through live exploitation.

RemediationAI

Apply the upstream stable fix commit appropriate for the running kernel series: for 6.6.x upgrade to 6.6.128 or cherry-pick commit 2fef8c2ac67e7c1b0409d23653300b134c63e54c (https://git.kernel.org/stable/c/2fef8c2ac67e7c1b0409d23653300b134c63e54c); for 6.12.x apply commit c11cd77a18115d2cd3f4b6915c4a537b6042f950 (https://git.kernel.org/stable/c/c11cd77a18115d2cd3f4b6915c4a537b6042f950); for 6.18.x apply commit 3f43e7812b30d6b2e850218f9bb1dae60727fcef (https://git.kernel.org/stable/c/3f43e7812b30d6b2e850218f9bb1dae60727fcef); for 6.19.x apply commit ee41e5b63c8210525c936ee637a2c8d185ce873c (https://git.kernel.org/stable/c/ee41e5b63c8210525c936ee637a2c8d185ce873c); for the 7.0 mainline apply commit f8a5426652bdadd4a5cb48326d48abbdfebe8153 (https://git.kernel.org/stable/c/f8a5426652bdadd4a5cb48326d48abbdfebe8153). If patching cannot be scheduled immediately and AMD GPU RAS monitoring is non-essential, administrators may disable the RAS feature via the kernel module parameter 'amdgpu.ras_enable=0' at module load time - note this disables RAS error telemetry and hardware fault detection for the GPU, which may reduce observability on server-class AMD GPU deployments. Given the very low exploitation risk, deferring this to the next planned maintenance window is a defensible decision.

Same weakness CWE-401 – Memory Leak

View all
CVE-2016-4232 HIGH POC
7.5
CVE-2024-25450 HIGH POC
8.8
CVE-2023-33718 HIGH POC
8.8
CVE-2019-6128 HIGH POC
8.8
CVE-2023-34451 HIGH POC
8.2
CVE-2023-41484 HIGH POC
8.1
CVE-2023-23145 HIGH POC
7.8
CVE-2022-35858 HIGH POC
7.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: Low
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected

Share

CVE-2026-45976 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy