CVE-2026-46171 json
riscv: kvm: fix vector context allocation leak
published 2026-05-28 5 mo ago modified 2026-10-21 19 d ago also EUVD-2026-32798
- cvss
- 5.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.1%
- EPSS 0.1% chance of exploitation in 30 days, percentile 2%
- public exploits
- 0
- none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
riscv: kvm: fix vector context allocation leak
When the second kzalloc (host_context.vector.datap) fails in kvm_riscv_vcpu_alloc_vector_context, the first allocation (guest_context.vector.datap) is leaked. Free it before returning.
Patch / fix
- Linux Linux 6.6.160, 6.12.114, 6.18.30, 7.0.7, 7.1
- linux Debian 13 6.12.115-2
- linux Debian 14 7.0.7-1
debian advisories DEBIAN-CVE-2026-46171
- linux Ubuntu 26.04 LTS 7.0.0-28.28
- linux-aws Ubuntu 26.04 LTS 7.0.0-1009.9
- linux-gcp Ubuntu 26.04 LTS 7.0.0-1008.8
- linux-gke Ubuntu 26.04 LTS 7.0.0-1003.4
- linux-ibm Ubuntu 26.04 LTS 7.0.0-1010.10
- linux-azure Ubuntu 26.04 LTS 7.0.0-1010.10
- linux-raspi Ubuntu 26.04 LTS 7.0.0-1015.15
- linux-riscv Ubuntu 26.04 LTS 7.0.0-28.28.1
ubuntu advisories UBUNTU-CVE-2026-46171
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel-source openSUSE Tumbleweed 7.0.11-1.1
opensuse advisories openSUSE-SU-2026:10954-1
- git.kernel.org/stable/c/8f3a5dc4055e1001b44ca8ae2bd3eb1d07782049 commit
- git.kernel.org/stable/c/70ecebe7c58ce01f8da3f513eafb51bd147b1e63 commit
- git.kernel.org/stable/c/bd62c0f61bc722a097417401030c596cea8e21aa commit
- git.kernel.org/stable/c/1d57ab45ec5c0e22789de793bcf2a31ad6fb7d98 commit
- git.kernel.org/stable/c/b7c958d7c1eb1cb9b2be7b5ee4129fcd66cec978 commit
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2026-46171 updated
kernel: riscv: kvm: fix vector context allocation leak
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 more Red Hat Enterprise Linux 10 kernelnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.13% chance of exploitation in the next 30 days, higher than 2% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Linux Linux
Classification
- Weakness
-
- CWE-401 Missing Release of Memory after Effective Lifetime
- Technology feeds
References
- git.kernel.org /stable/c/8f3a5dc4055e1001b44ca8ae2bd3eb1d07782049
- git.kernel.org /stable/c/70ecebe7c58ce01f8da3f513eafb51bd147b1e63
-
git.kernel.org
/stable/c/bd62c0f61bc722a097417401030c596cea8e21aa
patch
-
git.kernel.org
/stable/c/1d57ab45ec5c0e22789de793bcf2a31ad6fb7d98
patch
-
git.kernel.org
/stable/c/b7c958d7c1eb1cb9b2be7b5ee4129fcd66cec978
patch
Sources
- CVE List CVE-2026-46171
- NVD CVE-2026-46171
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.