{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46068", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.095Z", "datePublished": "2026-05-27T12:57:48.457Z", "dateUpdated": "2026-06-14T17:51:58.785Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-14T17:51:58.785Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx\n\nThe bounce buffers are allocated with __get_free_pages() using\nBOUNCE_BUFFER_ORDER (order 2 = 4 pages), but both the allocation error\npath and nx842_crypto_free_ctx() release the buffers with free_page().\nUse free_pages() with the matching order instead."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/nx/nx-842.c"], "versions": [{"version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "lessThan": "f17a4850d1ce7c11cba8b1830b9bfedfede878bb", "status": "affected", "versionType": "git"}, {"version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "lessThan": "910bb34b801d39794e656f7d48414844b2bd354e", "status": "affected", "versionType": "git"}, {"version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "lessThan": "5c07962fed66e1238fad7635fa150570bd38b4c5", "status": "affected", "versionType": "git"}, {"version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "lessThan": "80fd99d7c30ea889662d21f1b44d8fea4c83138d", "status": "affected", "versionType": "git"}, {"version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "lessThan": "adb3faf2db1a66d0f015b44ac909a32dfc7f2f9c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/nx/nx-842.c"], "versions": [{"version": "4.2", "status": "affected"}, {"version": "0", "lessThan": "4.2", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.141", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.88", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.27", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.4", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.6.141"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.12.88"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.18.27"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "7.0.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f17a4850d1ce7c11cba8b1830b9bfedfede878bb"}, {"url": "https://git.kernel.org/stable/c/910bb34b801d39794e656f7d48414844b2bd354e"}, {"url": "https://git.kernel.org/stable/c/5c07962fed66e1238fad7635fa150570bd38b4c5"}, {"url": "https://git.kernel.org/stable/c/80fd99d7c30ea889662d21f1b44d8fea4c83138d"}, {"url": "https://git.kernel.org/stable/c/adb3faf2db1a66d0f015b44ac909a32dfc7f2f9c"}], "title": "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/crypto/nx/nx-842.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f17a4850d1ce7c11cba8b1830b9bfedfede878bb", "status": "affected", "version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "versionType": "git"}, {"lessThan": "910bb34b801d39794e656f7d48414844b2bd354e", "status": "affected", "version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "versionType": "git"}, {"lessThan": "5c07962fed66e1238fad7635fa150570bd38b4c5", "status": "affected", "version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "versionType": "git"}, {"lessThan": "80fd99d7c30ea889662d21f1b44d8fea4c83138d", "status": "affected", "version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "versionType": "git"}, {"lessThan": "adb3faf2db1a66d0f015b44ac909a32dfc7f2f9c", "status": "affected", "version": "ed70b479c2c0b6e1319f0cb2de19f1051be219a4", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/crypto/nx/nx-842.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.2"}, {"lessThan": "4.2", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.141", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.88", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.27", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx\n\nThe bounce buffers are allocated with __get_free_pages() using\nBOUNCE_BUFFER_ORDER (order 2 = 4 pages), but both the allocation error\npath and nx842_crypto_free_ctx() release the buffers with free_page().\nUse free_pages() with the matching order instead."}], "id": "CVE-2026-46068", "lastModified": "2026-06-17T10:53:00.927", "metrics": {}, "published": "2026-05-27T14:17:27.940", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5c07962fed66e1238fad7635fa150570bd38b4c5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/80fd99d7c30ea889662d21f1b44d8fea4c83138d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/910bb34b801d39794e656f7d48414844b2bd354e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/adb3faf2db1a66d0f015b44ac909a32dfc7f2f9c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f17a4850d1ce7c11cba8b1830b9bfedfede878bb"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}

{"bugzilla": {"description": "kernel: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx", "id": "2481921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481921"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-763", "details": ["A flaw was found in the Linux kernel's crypto:nx component. This vulnerability involves incorrect memory management during the deallocation of bounce buffers, where an improper function is used. This can lead to memory leaks, which may result in system instability or a Denial of Service (DoS) condition by consuming available memory resources."], "name": "CVE-2026-46068", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-46068\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46068\nhttps://lore.kernel.org/linux-cve-announce/2026052757-CVE-2026-46068-1fce@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ed70b479c2c0b6e1319f0cb2de19f1051be219a4,f17a4850d1ce7c11cba8b1830b9bfedfede878bb)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ed70b479c2c0b6e1319f0cb2de19f1051be219a4,910bb34b801d39794e656f7d48414844b2bd354e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ed70b479c2c0b6e1319f0cb2de19f1051be219a4,5c07962fed66e1238fad7635fa150570bd38b4c5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ed70b479c2c0b6e1319f0cb2de19f1051be219a4,80fd99d7c30ea889662d21f1b44d8fea4c83138d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ed70b479c2c0b6e1319f0cb2de19f1051be219a4,adb3faf2db1a66d0f015b44ac909a32dfc7f2f9c)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.2"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,4.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.141,7.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.88,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.27,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.4,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-27T18:15:21.493846+00:00", "updated": "2026-05-28T03:45:06.304869+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}