NetSight
IP …
high7.8

CVE-2026-46075

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwr…

Impact

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwrng to prevent new ->read() calls and flush the Atmel I2C workqueue before teardown to prevent a potential UAF if a queued callback runs while the device is being removed. Drop the early return to ensure sysfs entries are removed and ->hwrng.priv is freed, preventing a memory leak.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.3 before 6.1.175
from 6.2 before 6.6.140
from 6.7 before 6.12.86
from 6.13 before 6.18.27
from 6.19 before 7.0.4

Weakness classification

CWE-416

References