PT-2026-72817

CVE-2026-74381

·

Published

2026-05-15

·

Updated

2026-11-03

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A circular reference issue exists in the host1x GPU driver. When a buffer object is pinned using the host1x bo pin() function with a cache, the resulting mapping is stored in the cache for reuse. Because each mapping maintains a reference to the underlying host1x bo (via tegra bo pin or gather bo pin), the buffer object cannot be freed while the mapping remains cached. Since the only mechanism to remove the cached mapping is the buffer object's own free path, any cached buffer object becomes impossible to free, leading to a memory leak.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
SUSE-SU-2026:5091-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
Found an issue in the description? Have something to add? Feel free to write us 👾