Junglewise Threat Intelligence

CVE-2026-46030: Linux Kernel memory leak in EDAC versalnet mc_probe

CVE-2026-46030 · Severity: info · CVSS 0 · Published 2026-05-27

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A memory leak was identified in the Linux kernel's AMD Versal NET DDR controller driver. This component is responsible for Error Detection and Correction (EDAC) on specific AMD hardware platforms. While not directly exploitable for data theft, persistent memory leaks can eventually degrade system performance or lead to a system crash (denial of service) over long periods of operation.

Technical details

A resource leak exists in drivers/edac/versalnet_edac.c within the mc_probe() function. The function calls of_parse_phandle(), which increments the reference count of a device_node, but fails to call of_node_put() to release it on exit paths. This results in a persistent memory leak of the r5_core_node object. The fix implements the __free(device_node) automatic cleanup attribute to ensure the reference is properly released when the variable goes out of scope. This is a local resource management issue with low security impact, primarily affecting system stability over time.

Affected products

  • Linux Linux Kernel AMD Versal NET DDR controller driver (versalnet_edac.c)

Timeline

  • 2026-03-23: other: Patch authored
  • 2026-05-27: advisory: NVD publication date

References

Related threats