CVE-2026-46201

HIGH EPSS 3.6%
Published May 28, 20261mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published May 28, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_init_obj() fails, the attachment from dma_buf_dynamic_attach() is not detached. Add dma_buf_detach() before returning the error. Note: we cannot use goto out_err here because xe_dma_buf_init_obj() already frees bo on failure, and out_err would double-free it. (cherry picked from commit a828eb185aac41800df8eae4b60501ccc0dbbe51)

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
3.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 4

VendorProductVersionRange
linuxlinux_kernel*≥6.8  –  <6.12.90
linuxlinux_kernel*≥6.13  –  <6.18.32
linuxlinux_kernel*≥6.19  –  <7.0.9
linuxlinux_kernel7.1any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/0afa8b1ef582ecf6fb04097fd356f8741e5005ed
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/111ab678471bf1f90d078d5513bb086b70596c3c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d394669e194936d7ce15284a24a5ae334c4c5b74
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eea1e10f8d99c0f04deef707c99705b94bba3b78
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0afa8b1ef582ecf6fb04097fd356f8741e5005ed
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/111ab678471bf1f90d078d5513bb086b70596c3c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d394669e194936d7ce15284a24a5ae334c4c5b74
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eea1e10f8d99c0f04deef707c99705b94bba3b78
    Patch