CVE-2026-43105

drm/vc4: Fix memory leak of BO array in hang state

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: Jun 1, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Fix memory leak of BO array in hang state

The hang state's BO array is allocated separately with kzalloc() in vc4_save_hang_state() but never freed in vc4_free_hang_state(). Add the missing kfree() for the BO array before freeing the hang state struct.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	214613656b5179f0daab6e0a080814b5100d45f0 to before 7235fc096ece53211bd2c0e958c65f9b802aeb98Affected 214613656b5179f0daab6e0a080814b5100d45f0 to before 686bb2fce082f043db50db02b5de5c64ca4dc4c4Affected 214613656b5179f0daab6e0a080814b5100d45f0 to before 9c092941fc1d00933bcb46ecac1cb930db3abf5dAffected 214613656b5179f0daab6e0a080814b5100d45f0 to before a812008fe3a0aebb778d277b35717f64e23d0302Affected 214613656b5179f0daab6e0a080814b5100d45f0 to before 0d3c014a84396a147705f523a8fd6fc873e76502Affected 214613656b5179f0daab6e0a080814b5100d45f0 to before 421cea4f71f7cf65abaae878562ee4aa2b684628Affected 214613656b5179f0daab6e0a080814b5100d45f0 to before b8138567c4a80fd76a647849ebd4284996cf4b17Affected 214613656b5179f0daab6e0a080814b5100d45f0 to before f4dfd6847b3e5d24e336bca6057485116d17aea4Affected
LinuxLinux	4.5Affected before 4.5Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.136 through 6.6.Not affected 6.12.83 through 6.12.Not affected 6.18.24 through 6.18.Not affected 6.19.14 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

214613656b5179f0daab6e0a080814b5100d45f0 to before 7235fc096ece53211bd2c0e958c65f9b802aeb98Affected
214613656b5179f0daab6e0a080814b5100d45f0 to before 686bb2fce082f043db50db02b5de5c64ca4dc4c4Affected
214613656b5179f0daab6e0a080814b5100d45f0 to before 9c092941fc1d00933bcb46ecac1cb930db3abf5dAffected
214613656b5179f0daab6e0a080814b5100d45f0 to before a812008fe3a0aebb778d277b35717f64e23d0302Affected
214613656b5179f0daab6e0a080814b5100d45f0 to before 0d3c014a84396a147705f523a8fd6fc873e76502Affected
214613656b5179f0daab6e0a080814b5100d45f0 to before 421cea4f71f7cf65abaae878562ee4aa2b684628Affected
214613656b5179f0daab6e0a080814b5100d45f0 to before b8138567c4a80fd76a647849ebd4284996cf4b17Affected
214613656b5179f0daab6e0a080814b5100d45f0 to before f4dfd6847b3e5d24e336bca6057485116d17aea4Affected

LinuxLinux

4.5Affected
before 4.5Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.136 through 6.6.*Not affected
6.12.83 through 6.12.*Not affected
6.18.24 through 6.18.*Not affected
6.19.14 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.