Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43105

drm/vc4: Fix memory leak of BO array in hang state

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix memory leak of BO array in hang state The hang state's BO array is allocated separately with kzalloc() in vc4_save_hang_state() but never freed in vc4_free_hang_state(). Add the missing kfree() for the BO array before freeing the hang state struct.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 214613656b5179f0daab6e0a080814b5100d45f0 to < 7235fc096ece53211bd2c0e958c65f9b802aeb98affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to < 686bb2fce082f043db50db02b5de5c64ca4dc4c4affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to < 9c092941fc1d00933bcb46ecac1cb930db3abf5daffected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to < a812008fe3a0aebb778d277b35717f64e23d0302affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to < 0d3c014a84396a147705f523a8fd6fc873e76502affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to < 421cea4f71f7cf65abaae878562ee4aa2b684628affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to < b8138567c4a80fd76a647849ebd4284996cf4b17affected
  • 214613656b5179f0daab6e0a080814b5100d45f0 to < f4dfd6847b3e5d24e336bca6057485116d17aea4affected

Linux Linux

Default version status: affected

  • 4.5affected
  • 0 to < 4.5unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.136 to ≤ 6.6.*unaffected
  • 6.12.83 to ≤ 6.12.*unaffected
  • 6.18.24 to ≤ 6.18.*unaffected
  • 6.19.14 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References