CVE-2026-46171

Source
https://cve.org/CVERecord?id=CVE-2026-46171
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46171.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-46171
Downstream
AZL (1)
BELL (1)
CGA (5)
DEBIAN (1)
OESA (2)
openSUSE (1)
ROOT (2)
UBUNTU (1)
Related
Published
2026-05-28T09:36:25Z
Modified
2026-10-24T02:30:24Z
Summary
riscv: kvm: fix vector context allocation leak
Details

In the Linux kernel, the following vulnerability has been resolved:

riscv: kvm: fix vector context allocation leak

When the second kzalloc (host_context.vector.datap) fails in kvm_riscv_vcpu_alloc_vector_context, the first allocation (guest_context.vector.datap) is leaked. Free it before returning.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46171.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0f4b82579716b12bb88257bd7ea80f25c791fb2c
Fixed
8f3a5dc4055e1001b44ca8ae2bd3eb1d07782049
Fixed
70ecebe7c58ce01f8da3f513eafb51bd147b1e63
Fixed
bd62c0f61bc722a097417401030c596cea8e21aa
Fixed
1d57ab45ec5c0e22789de793bcf2a31ad6fb7d98
Fixed
b7c958d7c1eb1cb9b2be7b5ee4129fcd66cec978

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46171.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.30
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46171.json"