CVE-2026-63929

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the iio buffer enqueue dmabuf() function. The function allocates a iio dma fence structure via kmalloc obj() and dma fence init(), which sets an initial reference count of 1. Subsequently, dma resv add fence() is called, increasing the reference count to 2. Because the function returns without calling dma fence put() to release the initial reference, each buffer enqueue operation permanently leaks a kmalloc-128 allocation. The iio buffer cleanup() work item only releases the temporary reference from iio buffer signal dmabuf done(), leaving the initial reference unreleased.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.