CVE-2026-46221

EDAC/versalnet: Fix device name memory leak

published May 28, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

EDAC/versalnet: Fix device name memory leak

The device name allocated via kzalloc() in init_one_mc() is assigned to

dev->init_name but never freed on the normal removal path. device_register()

copies init_name and then sets dev->init_name to NULL, so the name pointer

becomes unreachable from the device. Thus leaking memory.

Use a stack-local char array instead of using kzalloc() for name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-28T09:40Z
EPSS history
Timeline
  • 28 MAY 09:40Z
    EDAC/versalnet: Fix device name memory leak
    cvelistv5