Home

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_init_obj() fails, the attachment from dma_buf_dynamic_attach() is not detached. Add dma_buf_detach() before returning the error. Note: we cannot use goto out_err here because xe_dma_buf_init_obj() already frees bo on failure, and out_err would double-free it. (cherry picked from commit a828eb185aac41800df8eae4b60501ccc0dbbe51)

PUBLISHED Reserved 2026-05-13 | Published 2026-05-28 | Updated 2026-05-30 | Assigner Linux




HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Product status

Default status
unaffected

dd08ebf6c3525a7ea2186e636df064ea47281987 (git) before d394669e194936d7ce15284a24a5ae334c4c5b74
affected

dd08ebf6c3525a7ea2186e636df064ea47281987 (git) before 0afa8b1ef582ecf6fb04097fd356f8741e5005ed
affected

dd08ebf6c3525a7ea2186e636df064ea47281987 (git) before eea1e10f8d99c0f04deef707c99705b94bba3b78
affected

dd08ebf6c3525a7ea2186e636df064ea47281987 (git) before 111ab678471bf1f90d078d5513bb086b70596c3c
affected

Default status
affected

6.8
affected

Any version before 6.8
unaffected

6.12.90 (semver)
unaffected

6.18.32 (semver)
unaffected

7.0.9 (semver)
unaffected

7.1-rc2 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/d394669e194936d7ce15284a24a5ae334c4c5b74

git.kernel.org/...c/0afa8b1ef582ecf6fb04097fd356f8741e5005ed

git.kernel.org/...c/eea1e10f8d99c0f04deef707c99705b94bba3b78

git.kernel.org/...c/111ab678471bf1f90d078d5513bb086b70596c3c

cve.org (CVE-2026-46201)

nvd.nist.gov (CVE-2026-46201)

Download JSON