Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CVE-2026-45922— RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler

AI Predicted 4.4 Difficulty: Easy

Possible ATT&CK Techniques 1AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 10

VendorProductVersion RangeStatus
LinuxLinuxec7ad6530909983c8736c80af46e3529ce7bab55< ee998cdbff6680891b0efd9d6ce53a388e5342c3affected
ec7ad6530909983c8736c80af46e3529ce7bab55< b2bc649c18fbe8a7fd38d17266da3dcbfbcc44d2affected
ec7ad6530909983c8736c80af46e3529ce7bab55< b3a10eca24fcfe913c0875e620f19596001bd6dcaffected
ec7ad6530909983c8736c80af46e3529ce7bab55< 9b9d253908478f504297ac283c514e5953ddafa6affected
6.12affected
< 6.12unaffected
6.12.75≤ 6.12.*unaffected
6.18.14≤ 6.18.*unaffected
… +2 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-45922

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler The UVERBS_HANDLER(MLX5_IB_METHOD_GET_DATA_DIRECT_SYSFS_PATH) function allocates memory for the device path using kobject_get_path(). If the length of the device path exceeds the output buffer length, the function returns -ENOSPC but does not free the allocated memory, resulting in a memory leak. Add a kfree() call to the error path to ensure the allocated memory is properly freed. Compile tested only. Issue found using a prototype static analysis tool and code review.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux ec7ad6530909983c8736c80af46e3529ce7bab55 ~ ee998cdbff6680891b0efd9d6ce53a388e5342c3 -
LinuxLinux 6.12 -

II. Public POCs for CVE-2026-45922

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-45922

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-45922 (2)

Same Patch Batch · Linux · 2026-05-27 · 276 CVEs total

CVE-2026-45915fat: avoid parent link count underflow in rmdir
CVE-2026-45933bpf: Preserve id of register in sync_linked_regs()
CVE-2026-45932bpf: Fix tcx/netkit detach permissions when prog fd isn't given
CVE-2026-45931accel/amdxdna: Hold mm structure across iommu_sva_unbind_device()
CVE-2026-45930net: mctp: ensure our nlmsg responses are initialised
CVE-2026-45929ovpn: fix possible use-after-free in ovpn_net_xmit
CVE-2026-45928media: chips-media: wave5: Fix memory leak on codec_info allocation failure
CVE-2026-45927bpf: Require frozen map for calculating map hash
CVE-2026-45926rust: pwm: Fix potential memory leak on init error
CVE-2026-45925thermal/of: Fix reference leak in thermal_of_cm_lookup()
CVE-2026-45924ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
CVE-2026-45923net: usb: catc: enable basic endpoint checking
CVE-2026-45921mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
CVE-2026-45920ext4: fix dirtyclusters double decrement on fs shutdown
CVE-2026-45919sched/rt: Skip currently executing CPU in rto_next_cpu()
CVE-2026-45918ovpn: tcp - don't deref NULL sk_socket member after tcp_close()
CVE-2026-45917ipvs: do not keep dest_dst if dev is going down
CVE-2026-45916power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
CVE-2026-45905xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
CVE-2026-45903bpf: Fix memory access flags in helper prototypes

Showing top 20 of 276 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-45922

No comments yet

Leave a comment