Riskcovery

CVE-2026-43104

drm/vc4: Fix a memory leak in hang state error path

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
Jun 1, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Fix a memory leak in hang state error path

When vc4_save_hang_state() encounters an early return condition, it returns without freeing the previously allocated `kernel_state`, leaking memory.

Add the missing kfree() calls by consolidating the early return paths into a single place.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 214613656b5179f0daab6e0a080814b5100d45f0 to before c197def3834cbee3fd824ce4c57d08cb24e18955Affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to before 9487daa18e627ac6b5ed5911be79f23362554b70Affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to before 259e2bba3fd7005c62cbd42365a48b3221b244e3Affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to before dd5c49787a32da96a2b154427eb17cbf12a83c28Affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to before d8fdd6adc07b78ad3e9ee0004876d90cb59ca941Affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to before e352e9adc9f6df54d63150ff832f71c04e30744bAffected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to before 3eb7dd55021d0f4308fbea0bea21d2118984d8e7Affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to before 9525d169e5fd481538cf8c663cc5839e54f2e481Affected
LinuxLinux
  • 4.5Affected
  • before 4.5Not affected
  • 5.10.258 through 5.10.*Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.136 through 6.6.*Not affected
  • 6.12.83 through 6.12.*Not affected
  • 6.18.24 through 6.18.*Not affected
  • 6.19.14 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.