AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72361

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of managed buffer objects (BO) in the hw_engine initialization process, where an explicit double-free can occur during error handling. This flaw could lead to potential memory corruption or application crashes, impacting system stability and security. Linux users and administrators, especially those utilizing graphics or hardware acceleration features, should prioritize addressing this issue to mitigate associated risks.

CVE
CVE-2026-72361
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hw_engine: Fix double-free of managed BO in error path The error path in hw_engine_init() explicitly frees a BO allocated with xe_managed_bo_create_pin_map() via xe_bo_unpin_map_no_vm(). Since the managed BO already has a devm cleanup action registered, this causes a double-free when devm unwinds during probe failure. Remove the explicit free and let devm handle it, consistent with all other xe_managed_bo_create_pin_map() callers. (cherry picked from commit e459a3bdeb117be496d7f229e2ea1f6c9fe4080b)