5.5

CVE-2026-43105

drm/vc4: Fix memory leak of BO array in hang state

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Fix memory leak of BO array in hang state

The hang state's BO array is allocated separately with kzalloc() in
vc4_save_hang_state() but never freed in vc4_free_hang_state(). Add the
missing kfree() for the BO array before freeing the hang state struct.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.5 < 6.6.136
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.83
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.24
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.14
Linux ≫ Linux Kernel Version7.0 Updaterc1
Linux ≫ Linux Kernel Version7.0 Updaterc2
Linux ≫ Linux Kernel Version7.0 Updaterc3
Linux ≫ Linux Kernel Version7.0 Updaterc4
Linux ≫ Linux Kernel Version7.0 Updaterc5
Linux ≫ Linux Kernel Version7.0 Updaterc6
Linux ≫ Linux Kernel Version7.0 Updaterc7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.017
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/a812008fe3a0aebb778d277b35717f64e23d0302
Patch
https://git.kernel.org/stable/c/0d3c014a84396a147705f523a8fd6fc873e76502
Patch
https://git.kernel.org/stable/c/421cea4f71f7cf65abaae878562ee4aa2b684628
Patch
https://git.kernel.org/stable/c/b8138567c4a80fd76a647849ebd4284996cf4b17
Patch
https://git.kernel.org/stable/c/f4dfd6847b3e5d24e336bca6057485116d17aea4
Patch
https://git.kernel.org/stable/c/686bb2fce082f043db50db02b5de5c64ca4dc4c4
https://git.kernel.org/stable/c/7235fc096ece53211bd2c0e958c65f9b802aeb98
https://git.kernel.org/stable/c/9c092941fc1d00933bcb46ecac1cb930db3abf5d