CVE-2026-45900

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: caam - fix netdev memory leak in dpaa2_caam_probe

When commit 0e1a4d427f58 ("crypto: caam: Unembed net_dev structure in

dpaa2") converted embedded net_device to dynamically allocated pointers,

it added cleanup in dpaa2_dpseci_disable() but missed adding cleanup in

dpaa2_dpseci_free() for error paths.

This causes memory leaks when dpaa2_dpseci_dpio_setup() fails during probe

due to DPIO devices not being ready yet. The kernel's deferred probe

mechanism handles the retry successfully, but the netdevs allocated during

the failed probe attempt are never freed, resulting in kmemleak reports

showing multiple leaked netdev-related allocations all traced back to

dpaa2_caam_probe().

Fix this by preserving the CPU mask of allocated netdevs during setup and

using it for cleanup in dpaa2_dpseci_free(). This approach ensures that

only the CPUs that actually had netdevs allocated will be cleaned up,

avoiding potential is

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References