CVE-2026-43397

drm/bridge: samsung-dsim: Fix memory leak in error path

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: samsung-dsim: Fix memory leak in error path

In samsung_dsim_host_attach(), drm_bridge_add() is called to add the bridge. However, if samsung_dsim_register_te_irq() or pdata->host_ops->attach() fails afterwards, the function returns without removing the bridge, causing a memory leak.

Fix this by adding proper error handling with goto labels to ensure drm_bridge_remove() is called in all error paths. Also ensure that samsung_dsim_unregister_te_irq() is called if the attach operation fails after the TE IRQ has been registered.

samsung_dsim_unregister_te_irq() function is moved without changes to be before samsung_dsim_host_attach() to avoid forward declaration.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e7447128ca4a250374d6721ee98e3e3cf99551a6 to before 98310fe3a2a79671b739a5344c1a11d74c503e25Affected
  • e7447128ca4a250374d6721ee98e3e3cf99551a6 to before 0b07f7d2c5a4078c2f1c11bb36685084fe4e5c95Affected
  • e7447128ca4a250374d6721ee98e3e3cf99551a6 to before e6d779654cda63d632bd8dfcdcabd125057e30a5Affected
  • e7447128ca4a250374d6721ee98e3e3cf99551a6 to before a40b92fb4b26d4cb1b5e439e55a56db7e79a82d1Affected
  • e7447128ca4a250374d6721ee98e3e3cf99551a6 to before 803ec1faf7c1823e6e3b1f2aaa81be18528c9436Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.130 through 6.6.*Not affected
  • 6.12.78 through 6.12.*Not affected
  • 6.18.19 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.