Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-46201

drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_init_obj() fails, the attachment from dma_buf_dynamic_attach() is not detached. Add dma_buf_detach() before returning the error. Note: we cannot use goto out_err here because xe_dma_buf_init_obj() already frees bo on failure, and out_err would double-free it. (cherry picked from commit a828eb185aac41800df8eae4b60501ccc0dbbe51)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < d394669e194936d7ce15284a24a5ae334c4c5b74affected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < 0afa8b1ef582ecf6fb04097fd356f8741e5005edaffected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < eea1e10f8d99c0f04deef707c99705b94bba3b78affected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < 111ab678471bf1f90d078d5513bb086b70596c3caffected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.90 to ≤ 6.12.*unaffected
  • 6.18.32 to ≤ 6.18.*unaffected
  • 7.0.9 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References