CVE-2026-46019
Published May 27, 2026
Modified Jun 1, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup atmel_aes_buff_init() allocates 4 pages using __get_free_pages() with ATMEL_AES_BUFFER_ORDER, but atmel_aes_buff_cleanup() frees only the first page using free_page(), leaking the remaining 3 pages. Use free_pages() with ATMEL_AES_BUFFER_ORDER to fix the memory leak.
Is your site exposed to CVE-2026-46019?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0016
Probability of exploitation
0.06%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/03e00aafa5f747d07811589e8d5fee638245431b
https://git.kernel.org/stable/c/230ad8a78fe67266b1ba4685da1abdd61471c5b8
https://git.kernel.org/stable/c/3fcfff4ed35f963380a68741bcd52742baff7f76
https://git.kernel.org/stable/c/5ad40cde96d603a88d68f8ed59f6d36407ab1f3c
https://git.kernel.org/stable/c/61516b4a5b2647dc3f8f67b5dffaf038be997511
https://git.kernel.org/stable/c/65b3589d39d05699c3850202f8333e5361033ea3
https://git.kernel.org/stable/c/b63f1e2f0e319ad3fe4a58eb3db4fd50cc98baca
https://git.kernel.org/stable/c/de6952e0af2acbada900d742437e848285c01d11
Frequently Asked Questions
What is CVE-2026-46019? +
In the Linux kernel, the following vulnerability has been resolved:
crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
atmel_aes_buff_init() allocates 4 pages using __get_free_pages() with
ATMEL_AES_BUFFER_ORDER, but atmel_aes_buff_cleanup() frees only the
first page using free_page(), leaking the remaining 3 pages. Use
free_pages() with ATMEL_AES_BUFFER_ORDER to fix the memory leak.
How do I check if I'm vulnerable to CVE-2026-46019? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.