CVE-2026-23421
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-04-03
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/configfs: Free ctx_restore_mid_bb in release ctx_restore_mid_bb memory is allocated in wa_bb_store(), but xe_config_device_release() only frees ctx_restore_post_bb. Free ctx_restore_mid_bb[0].cs as well to avoid leaking the allocation when the configfs device is removed. (cherry picked from commit a235e7d0098337c3f2d1e8f3610c719a589e115f)
Affected Software (13)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | b30d5de3d40c3fa642079bac0d91f17091c5f877 < 7f971dfd48983074adc7bbcea3ee95ce7aad47cb |
| Linux | Linux | b30d5de3d40c3fa642079bac0d91f17091c5f877 < 3557359ea3df32430ea7c30f7a708ca9a91d7e0e |
| Linux | Linux | b30d5de3d40c3fa642079bac0d91f17091c5f877 < e377182f0266f46f02d01838e6bde67b9dac0d66 |
| Linux | Linux | 6.18 |
| linux | linux_kernel | 6.18.1 – 6.18.17 |
| linux | linux_kernel | 6.18 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |