CVE-2026-31390
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Linux kernel drm/xe driver, a memory leak occurs in xe_vm_madvise_ioctl. When check_bo_args_are_sane() validation fails, previously allocated resources are not freed, causing a memory leak.
Risk Assessment
Memory leak could exhaust system memory and potentially lead to denial of service on systems using this driver.
Recommendation
Apply the kernel patch that adds a free_vmas label for proper cleanup in the error path. Update the kernel.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xe_vm_madvise_ioctl When check_bo_args_are_sane() validation fails, jump to the new free_vmas cleanup label to properly free the allocated resources. This ensures proper cleanup in this error path. (cherry picked from commit 29bd06faf727a4b76663e4be0f7d770e2d2a7965)