{"id":"CVE-2026-46019","summary":"crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup\n\natmel_aes_buff_init() allocates 4 pages using __get_free_pages() with\nATMEL_AES_BUFFER_ORDER, but atmel_aes_buff_cleanup() frees only the\nfirst page using free_page(), leaking the remaining 3 pages. Use\nfree_pages() with ATMEL_AES_BUFFER_ORDER to fix the memory leak.","modified":"2026-06-18T03:54:35.503370676Z","published":"2026-05-27T12:56:21.100Z","related":["openSUSE-SU-2026:10954-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46019.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/03e00aafa5f747d07811589e8d5fee638245431b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/230ad8a78fe67266b1ba4685da1abdd61471c5b8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3fcfff4ed35f963380a68741bcd52742baff7f76"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5ad40cde96d603a88d68f8ed59f6d36407ab1f3c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/61516b4a5b2647dc3f8f67b5dffaf038be997511"},{"type":"WEB","url":"https://git.kernel.org/stable/c/65b3589d39d05699c3850202f8333e5361033ea3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b63f1e2f0e319ad3fe4a58eb3db4fd50cc98baca"},{"type":"WEB","url":"https://git.kernel.org/stable/c/de6952e0af2acbada900d742437e848285c01d11"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46019.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46019"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"bbe628ed897d728d38c4035381d12b2f308fac6f"},{"fixed":"de6952e0af2acbada900d742437e848285c01d11"},{"fixed":"5ad40cde96d603a88d68f8ed59f6d36407ab1f3c"},{"fixed":"03e00aafa5f747d07811589e8d5fee638245431b"},{"fixed":"b63f1e2f0e319ad3fe4a58eb3db4fd50cc98baca"},{"fixed":"65b3589d39d05699c3850202f8333e5361033ea3"},{"fixed":"61516b4a5b2647dc3f8f67b5dffaf038be997511"},{"fixed":"230ad8a78fe67266b1ba4685da1abdd61471c5b8"},{"fixed":"3fcfff4ed35f963380a68741bcd52742baff7f76"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46019.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.5.0"},{"fixed":"5.10.258"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.209"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.175"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.140"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.86"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.27"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46019.json"}}],"schema_version":"1.7.5"}