CVE-2026-46201
Published: May 28, 2026
Modified: May 30, 2026
CVSS v3.1
7.8
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_init_obj() fails, the attachment from dma_buf_dynamic_attach() is not detached. Add dma_buf_detach() before returning the error. Note: we cannot use goto out_err here because xe_dma_buf_init_obj() already frees bo on failure, and out_err would double-free it. (cherry picked from commit a828eb185aac41800df8eae4b60501ccc0dbbe51)
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected dd08ebf6c3525a7ea2186e636df064ea47281987 - < d394669e194936d7ce15284a24a5ae334c4c5b74affected dd08ebf6c3525a7ea2186e636df064ea47281987 - < 0afa8b1ef582ecf6fb04097fd356f8741e5005edaffected dd08ebf6c3525a7ea2186e636df064ea47281987 - < eea1e10f8d99c0f04deef707c99705b94bba3b78affected dd08ebf6c3525a7ea2186e636df064ea47281987 - < 111ab678471bf1f90d078d5513bb086b70596c3c |
Linux | Linux | affected 6.8unaffected 0 - < 6.8unaffected 6.12.90 - <= 6.12.*unaffected 6.18.32 - <= 6.18.*unaffected 7.0.9 - <= 7.0.*+1 more versions |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now