CVE-2026-43105
drm/vc4: Fix memory leak of BO array in hang state
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix memory leak of BO array in hang state The hang state's BO array is allocated separately with kzalloc() in vc4_save_hang_state() but never freed in vc4_free_hang_state(). Add the missing kfree() for the BO array before freeing the hang state struct.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/a812008fe3a0aebb778d277b35717f64e23d0302
- https://git.kernel.org/stable/c/0d3c014a84396a147705f523a8fd6fc873e76502
- https://git.kernel.org/stable/c/421cea4f71f7cf65abaae878562ee4aa2b684628
- https://git.kernel.org/stable/c/b8138567c4a80fd76a647849ebd4284996cf4b17
- https://git.kernel.org/stable/c/f4dfd6847b3e5d24e336bca6057485116d17aea4
References (8)
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Quick Info
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.