CVE-2026-46224: drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix bo leak in xedmabufinitobj() on allocation failure
When drmgpuvmresvobjectalloc() fails, the pre-allocated storage bo is not freed. Add xebofree(storage) before returning the error.
xedmabufinitobj() calls xeboinitlocked(), which frees the bo on error. Therefore, xedmabufinitobj() must also free the bo on its own error paths. Otherwise, since xegemprimeimport() cannot distinguish whether the failure originated from xedmabufinitobj() or from xeboinitlocked(), it cannot safely decide whether the bo should be freed.
Add comments documenting the ownership semantics: on success, ownership of storage is transferred to the returned drmgemobject; on failure, storage is freed before returning.
v2: Add comments to explain the free logic.
(cherry picked from commit 78a6c5f899f22338bbf48b44fb8950409c5a69b9)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 78a6c5f899f22338bbf48b44fb8950409c5a69b9 - Operational
Apply the fix in xe_dma_buf_init_obj(): free the pre-allocated storage on all allocation-failure paths by calling xe_bo_free(storage) before returning the error, and add comments documenting ownership semantics (on success ownership of storage is transferred to the returned drm_gem_object; on failure storage is freed).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46224?
CVE-2026-46224 has a risk rating of 12, indicating a critical severity level.
How do I fix CVE-2026-46224?
To fix CVE-2026-46224, ensure that the latest Linux kernel patches are applied which address the bug in xe_dma_buf_init_obj() by freeing the pre-allocated storage.
What systems are affected by CVE-2026-46224?
CVE-2026-46224 affects systems running vulnerable versions of the Linux kernel that utilize the DRM subsystem.
Will CVE-2026-46224 affect system performance?
CVE-2026-46224 may cause resource leaks which can lead to degraded system performance over time if not addressed.
What is the nature of the vulnerability described in CVE-2026-46224?
CVE-2026-46224 is a resource leak vulnerability that occurs when memory allocated for a buffer object is not freed upon allocation failure.