Linux Kernel CVE-2026-46030

EDAC (Error Detection and Correction) is a Linux kernel subsystem for detecting and reporting hardware memory errors. The versalnet driver specifically targets AMD/Xilinx Versal SoC platforms. The vulnerable function mc_probe() calls of_parse_phandle() to resolve a device tree phandle reference into a device_node struct. Per Linux kernel convention, of_parse_phandle() returns a reference-counted pointer that callers must explicitly release via of_node_put() - analogous to a kref_put(). CWE-401 (Missing Release of Memory after Effective Lifetime) precisely describes this pattern: the r5_core_node pointer was never freed on any exit path, causing a cumulative kernel memory leak across probe invocations. The upstream fix adopts __free(device_node), a GCC/Clang scope-based cleanup attribute that automatically calls of_node_put() when the variable exits scope, eliminating the manual-release obligation. CPE cpe:2.3:o:linux:linux_kernel confirms broad kernel scope, bounded in practice to platforms loading this driver.