CVE-2026-46201

HIGH

drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_init_obj() fails, the attachment from dma_buf_dynamic_attach() is not detached. Add dma_buf_detach() before returning the error. Note: we cannot use goto out_err here because xe_dma_buf_init_obj() already frees bo on failure, and out_err would double-free it. (cherry picked from commit a828eb185aac41800df8eae4b60501ccc0dbbe51)

Scores

CVSS v3 7.8
EPSS 0.0014
EPSS Percentile 3.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-401
Status published
Products (16)
linux/Kernel 6.13.0 - 6.18.32linux
linux/Kernel 6.19.0 - 7.0.9linux
linux/Kernel 6.8.0 - 6.12.90linux
Linux/Linux < 6.8
Linux/Linux 6.12.90 - 6.12.*
Linux/Linux 6.18.32 - 6.18.*
Linux/Linux 6.8
Linux/Linux 7.0.9 - 7.0.*
Linux/Linux 7.1
Linux/Linux 7.1-rc2
... and 6 more
Published May 28, 2026
Tracked Since May 28, 2026