CVE-2026-43397drm/bridge: samsung-dsim: Fix memory leak in error path
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: samsung-dsim: Fix memory leak in error path In samsung_dsim_host_attach(), drm_bridge_add() is called to add the bridge. However, if samsung_dsim_register_te_irq() or pdata->host_ops->attach() fails afterwards, the function returns without removing the bridge, causing a memory leak. Fix this by adding proper error handling with goto labels to ensure drm_bridge_remove() is called in all error paths. Also ensure that samsung_dsim_unregister_te_irq() is called if the attach operation fails after the TE IRQ has been registered. samsung_dsim_unregister_te_irq() function is moved without changes to be before samsung_dsim_host_attach() to avoid forward declaration.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Analyzed
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from e7447128ca4a250374d6721ee98e3e3cf99551a6 before 98310fe3a2a79671b739a5344c1a11d74c503e25; from e7447128ca4a250374d6721ee98e3e3cf99551a6 before 0b07f7d2c5a4078c2f1c11bb36685084fe4e5c95; from e7447128ca4a250374d6721ee98e3e3cf99551a6 before e6d779654cda63d632bd8dfcdcabd125057e30a5; from e7447128ca4a250374d6721ee98e3e3cf99551a6 before a40b92fb4b26d4cb1b5e439e55a56db7e79a82d1; from e7447128ca4a250374d6721ee98e3e3cf99551a6 before 803ec1faf7c1823e6e3b1f2aaa81be18528c9436 | CNA record |
linux linux_kernel linux:linux_kernel | from 6.4 before 6.6.130; from 6.7 before 6.12.78; from 6.13 before 6.18.19; from 6.19 before 6.19.9; 7.0 | NVD |
References
- https://git.kernel.org/stable/c/98310fe3a2a79671b739a5344c1a11d74c503e25patch
- https://git.kernel.org/stable/c/0b07f7d2c5a4078c2f1c11bb36685084fe4e5c95patch
- https://git.kernel.org/stable/c/e6d779654cda63d632bd8dfcdcabd125057e30a5patch
- https://git.kernel.org/stable/c/a40b92fb4b26d4cb1b5e439e55a56db7e79a82d1patch
- https://git.kernel.org/stable/c/803ec1faf7c1823e6e3b1f2aaa81be18528c9436patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.