CVE-2026-43269

drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback

After several commits, the slab memory increases. Some drm_crtc_commit objects are not freed. The atomic_destroy_state callback only put the framebuffer. Use the __drm_atomic_helper_plane_destroy_state() function to put all the objects that are no longer needed.

It has been seen after hours of usage of a graphics application or using kmemleak:

unreferenced object 0xc63a6580 (size 64): comm "egt_basic", pid 171, jiffies 4294940784 hex dump (first 32 bytes): 40 50 34 c5 01 00 00 00 ff ff ff ff 8c 65 3a c6 @P4..........e:. 8c 65 3a c6 ff ff ff ff 98 65 3a c6 98 65 3a c6 .e:......e:..e:. backtrace (crc c25aa925): kmemleak_alloc+0x34/0x3c __kmalloc_cache_noprof+0x150/0x1a4 drm_atomic_helper_setup_commit+0x1e8/0x7bc drm_atomic_helper_commit+0x3c/0x15c drm_atomic_commit+0xc0/0xf4 drm_atomic_helper_set_config+0x84/0xb8 drm_mode_setcrtc+0x32c/0x810 drm_ioctl+0x20c/0x488 sys_ioctl+0x14c/0xc20 ret_fast_syscall+0x0/0x54

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 6d4e91ab97fda64e8cf9c8881cc3b4da026bd849Affected 2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 5718d98976ad6b9700e5a6afec67fc47a8a92580Affected 2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 57fa3487acfa3467405f8506b94682abd96e7393Affected 2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before ec40702029b08ee8d5f5b03303d64a10e74a957bAffected 2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 25e832a7830740e72103eb0b527680a4b64bbcb3Affected 2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 082271e364a3205598c2e4e6233a9f49ce7941cfAffected 2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 3e64e78f4a70e3f6ac8fe5a7071f08ffd25a2489Affected 2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before f12352471061df83a36edf54bbb16284793284e4Affected
LinuxLinux	4.1Affected before 4.1Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 6d4e91ab97fda64e8cf9c8881cc3b4da026bd849Affected
2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 5718d98976ad6b9700e5a6afec67fc47a8a92580Affected
2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 57fa3487acfa3467405f8506b94682abd96e7393Affected
2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before ec40702029b08ee8d5f5b03303d64a10e74a957bAffected
2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 25e832a7830740e72103eb0b527680a4b64bbcb3Affected
2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 082271e364a3205598c2e4e6233a9f49ce7941cfAffected
2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before 3e64e78f4a70e3f6ac8fe5a7071f08ffd25a2489Affected
2389fc1305fc1e2cf8b310a75463fefd3058bf48 to before f12352471061df83a36edf54bbb16284793284e4Affected

LinuxLinux

4.1Affected
before 4.1Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.