Memory Leak Vulnerability in Linux Kernel Affecting VC4 Graphics Driver

CVE-2026-43104

What is CVE-2026-43104?

A memory leak vulnerability exists in the Linux kernel, specifically within the VC4 graphics driver. This issue arises when the vc4_save_hang_state() function encounters an early return condition without properly releasing the previously allocated kernel_state. As a result, memory that should be freed remains allocated, leading to potential instability in the system over time. The vulnerability has been addressed by consolidating the early exit paths to ensure that memory is correctly freed, thus enhancing the overall robustness of the kernel's memory management.

References