CVE-2026-23421
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Linux kernel drm/xe/configfs driver, a memory leak occurs. xe_config_device_release() only frees ctx_restore_post_bb but not ctx_restore_mid_bb, causing a leak when the configfs device is removed.
Risk Assessment
Memory leak could exhaust system memory and potentially lead to denial of service on systems using configfs for the xe driver.
Recommendation
Apply the kernel patch that adds freeing of ctx_restore_mid_bb[0].cs in the release function. Update the kernel.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/xe/configfs: Free ctx_restore_mid_bb in release ctx_restore_mid_bb memory is allocated in wa_bb_store(), but xe_config_device_release() only frees ctx_restore_post_bb. Free ctx_restore_mid_bb[0].cs as well to avoid leaking the allocation when the configfs device is removed. (cherry picked from commit a235e7d0098337c3f2d1e8f3610c719a589e115f)