CVE-2026-23418
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Linux kernel drm/xe/reg_sr driver, a memory leak occurs. When xa_store() fails, the newly allocated entry is not freed, causing a memory leak on the error path.
Risk Assessment
Memory leak could exhaust system memory and potentially lead to denial of service on systems using this driver.
Recommendation
Apply the kernel patch that adds a goto fail_free label to free the entry on xa_store failure. Update the kernel.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Fix leak on xa_store failure Free the newly allocated entry when xa_store() fails to avoid a memory leak on the error path. v2: use goto fail_free. (Bala) (cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb)