Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrl_cmd_bye() A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But currently, the nameserver doesn't free the node memory even after processing the BYE packet. This causes the node memory to leak. Hence, remove the node from Xarray list and free the node memory during both success and failure case of ctrl_cmd_bye().
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.7, < 6.6.140 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/076e4b162d6caba12c229e7f262df5b6881162b0Patch
- https://git.kernel.org/stable/c/154fc7fe3f62c46891c3c4302f4b5b5391c932e6Patch
- https://git.kernel.org/stable/c/25d580a46b079a7963ff024a5195e547baf12b64
- https://git.kernel.org/stable/c/65932f5102bb5377db36c8a4f0c28179a1967a9aPatch
- https://git.kernel.org/stable/c/68efba36446a7774ea5b971257ade049272a07acPatch
- https://git.kernel.org/stable/c/6c9cca46acb6f22e63f015ea7b2ed6032d2badf5
- https://git.kernel.org/stable/c/a5a454f3364877b22f0e5a165df8b3702ff96ae7
- https://git.kernel.org/stable/c/ff78ed177a66763085e3214d6fbe13ca8f0b3f11Patch
FAQ
What is CVE-2026-46038?
CVE-2026-46038 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrl_cmd_bye() A node sends the BYE packet when it is about to go down. So the nameserver shou...
How severe is CVE-2026-46038?
CVE-2026-46038 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-46038?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.