SB2026052836 - Memory leak in Linux kernel mm

Description

This security bulletin contains information about 1 vulnerability.

1) Memory leak (CVE-ID: CVE-2026-46042)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper resource management in weighted_interleave_auto_store() when processing writes that toggle weighted interleave mode. A local user can repeatedly write crafted values such as "1" to trigger memory leaks and cause a denial of service.

The issue can be triggered repeatedly by writing values that match or change the current mode, leading to leaked kernel memory.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/39caa9ca863f96b3d00447c5aa200cabda489856
• https://git.kernel.org/stable/c/6fae274ce0e3109cbbc4c18b354eaace1f0af7d7
• https://git.kernel.org/stable/c/c42a7efb9060d89b72708ffaf255d0002c2164a7