CVE-2026-45947: drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix memory leak in amdgpuacpienumeratexcc()
In amdgpuacpienumeratexcc(), if amdgpuacpidevinit() returns -ENOMEM, the function returns directly without releasing the allocated xccinfo, resulting in a memory leak.
Fix this by ensuring that xccinfo is properly freed in the error paths.
Compile tested only. Issue found using a prototype static analysis tool and code review.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify amdgpu_acpi_enumerate_xcc() so that allocated xcc_info is properly freed on all error paths (for example when amdgpu_acpi_dev_init() returns -ENOMEM). Ensure xcc_info is released before returning from the function in error conditions.
Linux kernel (drm/amdgpu) amdgpu_acpi_enumerate_xcc error path handling = free xcc_info on error
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45947?
The severity of CVE-2026-45947 is rated at 6.
How do I fix CVE-2026-45947?
To fix CVE-2026-45947, ensure that you update to the patched version of the Linux kernel that resolves the memory leak in amdgpu_acpi_enumerate_xcc().
What does CVE-2026-45947 affect?
CVE-2026-45947 affects the Linux kernel's amdgpu driver functionality.
What causes CVE-2026-45947?
CVE-2026-45947 is caused by a memory leak in amdgpu_acpi_enumerate_xcc() that occurs when amdgpu_acpi_dev_init() fails.
When was CVE-2026-45947 published?
CVE-2026-45947 was published on May 27, 2026.