Riskcovery

CVE-2026-46201

drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()

State
Published
Severity
7.8 High
Published
May 28, 2026
Updated
Oct 19, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()

When xe_dma_buf_init_obj() fails, the attachment from dma_buf_dynamic_attach() is not detached. Add dma_buf_detach() before returning the error. Note: we cannot use goto out_err here because xe_dma_buf_init_obj() already frees bo on failure, and out_err would double-free it.

(cherry picked from commit a828eb185aac41800df8eae4b60501ccc0dbbe51)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-772 Missing Release of Resource after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to before d394669e194936d7ce15284a24a5ae334c4c5b74Affected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to before 0afa8b1ef582ecf6fb04097fd356f8741e5005edAffected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to before eea1e10f8d99c0f04deef707c99705b94bba3b78Affected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to before 111ab678471bf1f90d078d5513bb086b70596c3cAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.90 through 6.12.*Not affected
  • 6.18.32 through 6.18.*Not affected
  • 7.0.9 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.