crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req()
Published May 27, 2026
5.5
MEDIUMCVSS 3.1
EPSS 0.16%
Description
The starfive_aes_aead_do_one_req() function allocates rctx->adata with kzalloc() but fails to free it if sg_copy_to_buffer() or starfive_aes_hw_init() fails, which lead to memory leaks.
Since rctx->adata is unconditionally freed after the write_adata operations, ensure consistent cleanup by freeing the allocation in these earlier error paths as well.
Compile tested only. Issue found using a prototype static analysis tool and code review.
Affected products
-
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version
-
- Version 6.10StatusaffectedConstraints-
- Version 0StatusunaffectedConstraints<6.10
- Version 6.12.75StatusunaffectedConstraints<=6.12.*
- Version 6.18.14StatusunaffectedConstraints<=6.18.*
- Version 6.19.4StatusunaffectedConstraints<=6.19.*
- Version 7.0StatusunaffectedConstraints<=*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
- ≥ 6.10 · < 6.12.75
- ≥ 6.13 · < 6.18.14
- ≥ 6.19 · < 6.19.4
No data.
Red Hat Enterprise Linux 10
kernel
Not affected
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (9)
- https://access.redhat.com/security/cve/CVE-2026-45950 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2482062 Issue Tracking
- https://git.kernel.org/stable/c/38d80307decc1132626a30e2a62af734630ecca5 Patch
- https://git.kernel.org/stable/c/4869d0e4e48a5301b267d359b2561c4080791a55 Patch
- https://git.kernel.org/stable/c/5f2c964a058581e1557c32d5de651c67a80438a7 Patch
- https://git.kernel.org/stable/c/ccb679fdae2e62ed92fd9acb25ed809c0226fcc6 Patch
- https://lore.kernel.org/linux-cve-announce/2026052731-CVE-2026-45950-f8f7@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2026-45950
- https://www.cve.org/CVERecord?id=CVE-2026-45950
Change history (0)
No recorded changes yet.