Memory Leak Vulnerability in Linux Kernel Graphics Driver

CVE-2026-43269

What is CVE-2026-43269?

A memory leak vulnerability has been identified in the Linux kernel graphics driver related to the atomic_destroy_state callback functionality. During prolonged use of certain graphics applications, unreferenced drm_crtc_commit objects remain allocated, leading to increased slab memory consumption. This occurs due to the atomic_destroy_state callback only freeing the framebuffer without releasing all associated objects. The issue has been resolved by implementing the __drm_atomic_helper_plane_destroy_state() function to ensure adequate cleanup of all unneeded objects.

References