CVE-2026-45881
In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() In svs_enable_debug_write(), the buf allocated by memdup_user_nul() is leaked if kstrtoint() fails. Fix this by using __free(kfree) to automatically free buf, eliminating the need for explicit kfree() calls and preventing leaks. [Angelo: Added missing cleanup.h inclusion]
Affected versions
Linux kernel versions
6.0
and later are affected. Fixed in
6.1.165,
6.6.128,
6.12.75,
6.18.14,
6.19.4,
7.0
and their respective stable series.
References
The following references provide additional information about CVE-2026-45881 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/06195456c4e4de3826c4ca60eca941c472f991d0
-
PatchKernel patch commithttps://git.kernel.org/stable/c/0f6498077faa9cd89bb787bcc57063494a6f0601
-
PatchKernel patch commithttps://git.kernel.org/stable/c/47a3e372f7d68776adb749a27c0ec9058ff1b4fd
Frequently asked questions
-
What is CVE-2026-45881?
CVE-2026-45881 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.0 onward and has been patched in 6.1.165, 6.6.128, 6.12.75 and others. CVE-2026-45881 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-45881?
Yes — CVE-2026-45881 has been patched. Fixed versions include 6.1.165, 6.6.128, 6.12.75 and others. If you are running Linux kernel 6.0 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-45881 actively exploited?
No — CVE-2026-45881 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.