First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-45908

MediumCVSS 5.5/10Last modified Jun 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix memory leak in amdxdna_ubuf_map

The amdxdna_ubuf_map() function allocates memory for sg and internal sg table structures, but it fails to free them if subsequent operations (sg_alloc_table_from_pages or dma_map_sgtable) fail.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Linux	Linux	>= bd72d4acda1069579b35123e3cc0b21ec1193a21, < 5a68d2c99c859e6e8e36fa4e32749abf6d1fb66a; >= bd72d4acda1069579b35123e3cc0b21ec1193a21, < f9f4366d2ff93b07c2571561c776bd9a708078c3; >= bd72d4acda1069579b35123e3cc0b21ec1193a21, < 84dd57fb0359500092f1101409ca32091731490d
Linux	Linux	6.18

References

Timeline

Published: May 27, 2026
Last modified: Jun 24, 2026
NVD status: Undergoing Analysis

Related CVEs from 2026

CVE-2026-459097.8In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Drop __initconst from gates Since commit 8ceff24a754a (CVE-2026-45914.7A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/source-code/plugins/fileT CVE-2026-459107.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race condition in QP timer handlers I encontered the fol CVE-2026-459115.5In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix role switching during resume If the role change while CVE-2026-459125.5In the Linux kernel, the following vulnerability has been resolved: ext4: don't cache extent during splitting extent Caching extents durin CVE-2026-459135.5In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: always update mdb_n_entries for vlan contexts syzb CVE-2026-459147.8In the Linux kernel, the following vulnerability has been resolved: Revert "hwmon: (ibmpex) fix use-after-free in high/low store" This rev CVE-2026-459155.5In the Linux kernel, the following vulnerability has been resolved: fat: avoid parent link count underflow in rmdir Corrupted FAT images c CVE-2026-459167.8In the Linux kernel, the following vulnerability has been resolved: power: supply: sbs-battery: Fix use-after-free in power_supply_changed(CVE-2026-459175.5In the Linux kernel, the following vulnerability has been resolved: ipvs: do not keep dest_dst if dev is going down There is race between CVE-2026-459185.5In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - don't deref NULL sk_socket member after tcp_close() When d CVE-2026-459195.5In the Linux kernel, the following vulnerability has been resolved: sched/rt: Skip currently executing CPU in rto_next_cpu() CPU0 becomes

CVE-2026-45908: Medium severity, CVSS 5.5 | Vulnix