Memory Leak Vulnerability in Linux Kernel by Vendor

CVE-2026-46221

What is CVE-2026-46221?

A memory leak vulnerability exists in the Linux Kernel's EDAC/versalnet subsystem where allocated device names are not properly freed during normal removal processes. The device name, initially allocated using kzalloc(), is assigned to dev->init_name and subsequently becomes unreachable due to device_register() operations. To resolve this issue, it is recommended to use a stack-local character array instead of relying on dynamic memory allocation, preventing memory leakage and optimizing resource management.

References