CVE-2026-46201
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
30/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()<br />
<br />
When xe_dma_buf_init_obj() fails, the attachment from<br />
dma_buf_dynamic_attach() is not detached. Add dma_buf_detach() before<br />
returning the error. Note: we cannot use goto out_err here because<br />
xe_dma_buf_init_obj() already frees bo on failure, and out_err would<br />
double-free it.<br />
<br />
(cherry picked from commit a828eb185aac41800df8eae4b60501ccc0dbbe51)
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH