CVE-2026-46068

HIGH

crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx The bounce buffers are allocated with __get_free_pages() using BOUNCE_BUFFER_ORDER (order 2 = 4 pages), but both the allocation error path and nx842_crypto_free_ctx() release the buffers with free_page(). Use free_pages() with the matching order instead.

References (5)

Core 5

Scores

CVSS v3 7.8
EPSS 0.0013
EPSS Percentile 2.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (18)
linux/Kernel 4.2.0 - 6.6.141linux
linux/Kernel 6.13.0 - 6.18.27linux
linux/Kernel 6.19.0 - 7.0.4linux
linux/Kernel 6.7.0 - 6.12.88linux
Linux/Linux < 4.2
Linux/Linux 4.2
Linux/Linux 6.12.88 - 6.12.*
Linux/Linux 6.18.27 - 6.18.*
Linux/Linux 6.6.141 - 6.6.*
Linux/Linux 7.0.4 - 7.0.*
... and 8 more
Published May 27, 2026
Tracked Since May 27, 2026