PT-2026-44324

CVE-2026-46201

·

Published

2026-04-08

·

Updated

2026-10-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak occurs in the drm/xe component when the xe gem prime import() function is called. Specifically, if the xe dma buf init obj() function fails, the attachment created by dma buf dynamic attach() is not properly detached, leading to a dma-buf attachment leak.
Recommendations Update the Linux kernel to a version that includes the fix for the xe gem prime import() function. As a temporary mitigation, restrict the use of the xe gem prime import() function if possible.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1791800936
OPENSUSE-SU-2026:10954-1
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
USN-8566-1
USN-8567-1
USN-8568-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8593-1
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8618-1
USN-8619-1
USN-8663-1
USN-8664-1
USN-8665-1
USN-8728-1
USN-8728-2
USN-8728-3
Found an issue in the description? Have something to add? Feel free to write us 👾