Medium severity5.5NVD Advisory· Published May 28, 2026· Updated Jun 10, 2026
CVE-2026-46221
CVE-2026-46221
Description
In the Linux kernel, the following vulnerability has been resolved:
EDAC/versalnet: Fix device name memory leak
The device name allocated via kzalloc() in init_one_mc() is assigned to dev->init_name but never freed on the normal removal path. device_register() copies init_name and then sets dev->init_name to NULL, so the name pointer becomes unreachable from the device. Thus leaking memory.
Use a stack-local char array instead of using kzalloc() for name.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- osv-coords2 versions
>= 6.18.0, < 6.18.32+ 1 more
- (no CPE)range: >= 6.18.0, < 6.18.32
- (no CPE)range: < 7.0.11-1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.