In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Fix memory leak of BO array in hang state

The hang state's BO array is allocated separately with kzalloc() in
vc4_save_hang_state() but never freed in vc4_free_hang_state(). Add the
missing kfree() for the BO array before freeing the hang state struct.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00018.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
214613656b5179f0daab6e0a080814b5100d45f0 affected < a812008fe3a0aebb778d277b35717f64e23d0302
214613656b5179f0daab6e0a080814b5100d45f0 affected < 0d3c014a84396a147705f523a8fd6fc873e76502
214613656b5179f0daab6e0a080814b5100d45f0 affected < 421cea4f71f7cf65abaae878562ee4aa2b684628
214613656b5179f0daab6e0a080814b5100d45f0 affected < b8138567c4a80fd76a647849ebd4284996cf4b17
214613656b5179f0daab6e0a080814b5100d45f0 affected < f4dfd6847b3e5d24e336bca6057485116d17aea4
Linux Linux affected
Version Status Constraints
4.5 affected —
0 unaffected < 4.5
6.6.136 unaffected ≤ 6.6.*
6.12.83 unaffected ≤ 6.12.*
6.18.24 unaffected ≤ 6.18.*
6.19.14 unaffected ≤ 6.19.*
7.0 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0d3c014a84396a147705f523a8fd6fc873e76502 cve-icon cve-icon
https://git.kernel.org/stable/c/421cea4f71f7cf65abaae878562ee4aa2b684628 cve-icon cve-icon
https://git.kernel.org/stable/c/a812008fe3a0aebb778d277b35717f64e23d0302 cve-icon cve-icon
https://git.kernel.org/stable/c/b8138567c4a80fd76a647849ebd4284996cf4b17 cve-icon cve-icon
https://git.kernel.org/stable/c/f4dfd6847b3e5d24e336bca6057485116d17aea4 cve-icon cve-icon
History

Wed, 06 May 2026 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Wed, 06 May 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix memory leak of BO array in hang state The hang state's BO array is allocated separately with kzalloc() in vc4_save_hang_state() but never freed in vc4_free_hang_state(). Add the missing kfree() for the BO array before freeing the hang state struct.
Title drm/vc4: Fix memory leak of BO array in hang state
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-06T07:40:33.706Z

Reserved: 2026-05-01T14:12:55.984Z

Link: CVE-2026-43105

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-06T10:16:24.097

Modified: 2026-05-06T13:07:51.607

Link: CVE-2026-43105

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-06T12:15:03Z

Weaknesses