CVEvulnerability
CVE-2026-23421
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-04-03
- Last modified
- 2026-07-24
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/configfs: Free ctx_restore_mid_bb in release
ctx_restore_mid_bb memory is allocated in wa_bb_store(), but
xe_config_device_release() only frees ctx_restore_post_bb.
Free ctx_restore_mid_bb[0].cs as well to avoid leaking the allocation
when the configfs device is removed.
(cherry picked from commit a235e7d0098337c3f2d1e8f3610c719a589e115f)
Affected configurations
• linux linux kernel (>= 6.18.1 < 6.18.17)
• linux linux kernel (>= 6.19 < 6.19.7)
• linux linux kernel 6.18
• linux linux kernel 7.0