What’s Vulnerable › Vulnerabilities

CVE-2026-45986: crypto: ccree - fix a memory leak in cc_mac_digest()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-27 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: ccree - fix a memory leak in cc_mac_digest() Add cc_unmap_result() if cc_map_hash_request_final() fails to prevent potential memory leak.

Affected products

• Linux kernel: from 4.17 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.86; from 6.13 before 6.18.27 — fixed in 5.10.258, 5.15.209, 6.1.175, 6.12.86, 6.18.27, 6.6.140

How to fix

Upgrade to a fixed version: Linux kernel 5.10.258, 5.15.209, 6.1.175, 6.12.86. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/02c64052fad03699b9c6d1df2f9b444d17e4ac50
• https://git.kernel.org/stable/c/22f1dd4ca3bfe77db52cc7df3cc353dc114aab8b
• https://git.kernel.org/stable/c/3061c9bfb3f5b3522ab174e2fa7473b24422d1c6
• https://git.kernel.org/stable/c/502440c235fe34cee02b24d7f893841f7565b3bc
• https://git.kernel.org/stable/c/7c21d58fcd6ad8e15a539347254093c93224a8b2
• https://git.kernel.org/stable/c/7cd17993adb8a5d14a7e84d751316a5fdf0c251f
• https://git.kernel.org/stable/c/910f335786a0a0f0b46c3c8c19a13d25cb4454b6
• https://git.kernel.org/stable/c/f53458c7c756b3e0838d51cf1e9f41b25079801a

Get alerted when CVE-2026-45986 or the next vulnerability affects your stack