CVE-2026-46075

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description A Use-After-Free (UAF) and memory leak issue exists in the atmel-sha204a crypto component. The problem occurs during the device removal process if the Atmel I2C workqueue is not flushed before teardown, potentially allowing a queued callback to execute while the device is being removed. Additionally, an early return in the removal path prevents the deletion of sysfs entries and the freeing of hwrng.priv, leading to a memory leak.

Recommendations Update to version 7.0.11-1.1.