PT-2026-44264
CVE-2026-46141
·
Published
2026-05-28
·
Updated
2026-09-29
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak occurs in the powerpc/xive component when allocating MSI-X vectors for an NVMe device. The system creates a
xive irq data structure and stores it in irq data->chip data. When the MSI-X irqdomain is freed, the xive irq free data() function attempts to retrieve this structure using irq get chip data(), which incorrectly looks up the data through the child domain instead of the XIVE (parent) domain. Consequently, the lookup fails and the xive irq data structure is not freed, resulting in a kmemleak (kernel memory leak). This is resolved by using irq domain get irq data() to retrieve the irq data from the correct domain and then accessing the chip data via irq data get irq chip data().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾