CVE-2026-43105

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43105
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix memory leak of BO array in hang state The hang state's BO array is allocated separately with kzalloc() in vc4_save_hang_state() but never freed in vc4_free_hang_state(). Add the missing kfree() for the BO array before freeing the hang state struct.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0d3c014a84396a147705f523a8fd6fc873e76502 Patch
https://git.kernel.org/stable/c/421cea4f71f7cf65abaae878562ee4aa2b684628 Patch
https://git.kernel.org/stable/c/686bb2fce082f043db50db02b5de5c64ca4dc4c4
https://git.kernel.org/stable/c/7235fc096ece53211bd2c0e958c65f9b802aeb98
https://git.kernel.org/stable/c/9c092941fc1d00933bcb46ecac1cb930db3abf5d
https://git.kernel.org/stable/c/a812008fe3a0aebb778d277b35717f64e23d0302 Patch
https://git.kernel.org/stable/c/b8138567c4a80fd76a647849ebd4284996cf4b17 Patch
https://git.kernel.org/stable/c/f4dfd6847b3e5d24e336bca6057485116d17aea4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/686bb2fce082f043db50db02b5de5c64ca4dc4c4 -
  • () https://git.kernel.org/stable/c/7235fc096ece53211bd2c0e958c65f9b802aeb98 -
  • () https://git.kernel.org/stable/c/9c092941fc1d00933bcb46ecac1cb930db3abf5d -

11 May 2026, 17:32

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0d3c014a84396a147705f523a8fd6fc873e76502 - () https://git.kernel.org/stable/c/0d3c014a84396a147705f523a8fd6fc873e76502 - Patch
References () https://git.kernel.org/stable/c/421cea4f71f7cf65abaae878562ee4aa2b684628 - () https://git.kernel.org/stable/c/421cea4f71f7cf65abaae878562ee4aa2b684628 - Patch
References () https://git.kernel.org/stable/c/a812008fe3a0aebb778d277b35717f64e23d0302 - () https://git.kernel.org/stable/c/a812008fe3a0aebb778d277b35717f64e23d0302 - Patch
References () https://git.kernel.org/stable/c/b8138567c4a80fd76a647849ebd4284996cf4b17 - () https://git.kernel.org/stable/c/b8138567c4a80fd76a647849ebd4284996cf4b17 - Patch
References () https://git.kernel.org/stable/c/f4dfd6847b3e5d24e336bca6057485116d17aea4 - () https://git.kernel.org/stable/c/f4dfd6847b3e5d24e336bca6057485116d17aea4 - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401

06 May 2026, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 10:16

Updated : 2026-06-01 17:17

NVD link : CVE-2026-43105

Mitre link : CVE-2026-43105

CVE.ORG link : CVE-2026-43105

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime