Medium severity5.5NVD Advisory· Published May 28, 2026· Updated Jun 17, 2026

CVE-2026-46171

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: kvm: fix vector context allocation leak

When the second kzalloc (host_context.vector.datap) fails in kvm_riscv_vcpu_alloc_vector_context, the first allocation (guest_context.vector.datap) is leaked. Free it before returning.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SUSE S.A./Linux Enterprise Debuginfoinferred
Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.5,<6.18.30
- (no CPE)
osv-coords2 versions
pkg:linux/kernel pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
>= 6.5.0, < 6.18.30+ 1 more
- (no CPE)range: >= 6.5.0, < 6.18.30
- (no CPE)range: < 7.0.11-1.1

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000

CVE-2026-46171

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions