Executive brief
A memory leak vulnerability was identified in the Linux kernel's Intel GPU driver (xe). The issue occurs when the system fails to properly release memory resources during certain graphics data import operations. Over time, this could lead to system instability or a denial of service as available memory is exhausted.
Technical details
A resource leak exists in the xe_gem_prime_import() function within the drivers/gpu/drm/xe/xe_dma_buf.c component of the Linux kernel. When the xe_dma_buf_init_obj() function fails, the driver fails to call dma_buf_detach() for the attachment previously created via dma_buf_dynamic_attach(). This results in a dma-buf attachment leak. The fix involves explicitly calling dma_buf_detach() upon failure of xe_dma_buf_init_obj(). Note that a standard 'goto' error handler could not be used because xe_dma_buf_init_obj() handles the freeing of the buffer object (bo) itself, and a shared error path would have caused a double-free.
Affected products
- Linux Linux Kernel xe driver (Intel GPUs)
Timeline
- 2026-05-28: advisory: NVD publication date
- 2026-05-17: patched: Patch committed to stable tree