DMA-Buf Attachment Leak in Linux Kernel and Affected Products

CVE-2026-46201

What is CVE-2026-46201?

A vulnerability exists in the Linux kernel related to the dma-buf subsystem where an attachment leak occurs in the xe_gem_prime_import function. If the xe_dma_buf_init_obj function fails, the dynamically attached buffer is not properly detached, leading to a potential resource leak. This situation could allow unauthorized access or exploitation through the improper management of DMA buffers. The patch addresses the issue by ensuring that dma_buf_detach is invoked in error scenarios to prevent the leak.

References