Medium 5.5Published May 6, 2026

CVE-2026-43104drm/vc4: Fix a memory leak in hang state error path

Updated under an hour ago (Oct 29, 2026, 12:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix a memory leak in hang state error path When vc4_save_hang_state() encounters an early return condition, it returns without freeing the previously allocated `kernel_state`, leaking memory. Add the missing kfree() calls by consolidating the early return paths into a single place.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jun 1, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 214613656b5179f0daab6e0a080814b5100d45f0 before c197def3834cbee3fd824ce4c57d08cb24e18955; 214613656b5179f0daab6e0a080814b5100d45f0 builds before 9487daa18e627ac6b5ed5911be79f23362554b70; 214613656b5179f0daab6e0a080814b5100d45f0 builds before 259e2bba3fd7005c62cbd42365a48b3221b244e3; from 214613656b5179f0daab6e0a080814b5100d45f0 before dd5c49787a32da96a2b154427eb17cbf12a83c28; from 214613656b5179f0daab6e0a080814b5100d45f0 before d8fdd6adc07b78ad3e9ee0004876d90cb59ca941; from 214613656b5179f0daab6e0a080814b5100d45f0 before e352e9adc9f6df54d63150ff832f71c04e30744b; 214613656b5179f0daab6e0a080814b5100d45f0 builds before 3eb7dd55021d0f4308fbea0bea21d2118984d8e7; 214613656b5179f0daab6e0a080814b5100d45f0 builds before 9525d169e5fd481538cf8c663cc5839e54f2e481	CNA record
linux linux_kernel linux:linux_kernel	from 4.5 before 6.6.136; from 6.7 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; 7.0; 7.0; 7.0; 7.0; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/c197def3834cbee3fd824ce4c57d08cb24e18955
https://git.kernel.org/stable/c/9487daa18e627ac6b5ed5911be79f23362554b70
https://git.kernel.org/stable/c/259e2bba3fd7005c62cbd42365a48b3221b244e3
https://git.kernel.org/stable/c/dd5c49787a32da96a2b154427eb17cbf12a83c28	patch
https://git.kernel.org/stable/c/d8fdd6adc07b78ad3e9ee0004876d90cb59ca941	patch
https://git.kernel.org/stable/c/e352e9adc9f6df54d63150ff832f71c04e30744b	patch
https://git.kernel.org/stable/c/3eb7dd55021d0f4308fbea0bea21d2118984d8e7	patch
https://git.kernel.org/stable/c/9525d169e5fd481538cf8c663cc5839e54f2e481	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.