CVE-2026-43104

drm/vc4: Fix a memory leak in hang state error path

MEDIUM
5.5
CVSS Score
Published: May 6, 2026 at 07:40 AM UTC
Updated: June 17, 2026 at 10:48 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix a memory leak in hang state error path When vc4_save_hang_state() encounters an early return condition, it returns without freeing the previously allocated `kernel_state`, leaking memory. Add the missing kfree() calls by consolidating the early return paths into a single place.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.5 ≤ v < 5.10.2584.5 ≤ v < 5.15.2094.5 ≤ v < 6.1.1754.5 ≤ v < 6.12.834.5 ≤ v < 6.18.244.5 ≤ v < 6.19.144.5 ≤ v < 6.6.1364.5 ≤ v < 7.06.13 ≤ v < 6.18.246.19 ≤ v < 6.19.146.7 ≤ v < 6.12.83214613656b5179f0daab6e0a080814b5100d45f07.0 rc17.0 rc27.0 rc37.0 rc47.0 rc57.0 rc67.0 rc7
Vendor states this is fixed in 259e2bba3fd7005c62cbd42365a48b3221b244e3 (fixed)
Vendor states this is fixed in 3eb7dd55021d0f4308fbea0bea21d2118984d8e7 (fixed)
Vendor states this is fixed in 9487daa18e627ac6b5ed5911be79f23362554b70 (fixed)
Vendor states this is fixed in 9525d169e5fd481538cf8c663cc5839e54f2e481 (fixed)
Vendor states this is fixed in c197def3834cbee3fd824ce4c57d08cb24e18955 (fixed)
Vendor states this is fixed in d8fdd6adc07b78ad3e9ee0004876d90cb59ca941 (fixed)
Vendor states this is fixed in dd5c49787a32da96a2b154427eb17cbf12a83c28 (fixed)
Vendor states this is fixed in e352e9adc9f6df54d63150ff832f71c04e30744b (fixed)
Vendor states this is fixed in 4.5 (unaffected)
Vendor states this is fixed in 5.10.258 (unaffected)
Vendor states this is fixed in 5.15.209 (unaffected)
Vendor states this is fixed in 6.1.175 (unaffected)
Vendor states this is fixed in 6.12.83 (unaffected)
Vendor states this is fixed in 6.18.24 (unaffected)
Vendor states this is fixed in 6.19.14 (unaffected)
Vendor states this is fixed in 6.6.136 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card