PT-2026-37415 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-11 · CVE-2026-43105

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the DRM VC4 component of the Linux kernel. The BO array within the hang state is allocated using the kzalloc() function in vc4 save hang state() but is not released in vc4 free hang state(). This results in memory not being freed when the hang state structure is destroyed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-43105

Affected Products

Linux Kernel

References · 17

• https://cve.org/CVERecord?id=CVE-2026-43105 · Security Note
• https://git.kernel.org/stable/c/b8138567c4a80fd76a647849ebd4284996cf4b17 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43105 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43105 · Vendor Advisory
• https://git.kernel.org/stable/c/f4dfd6847b3e5d24e336bca6057485116d17aea4 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43105 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43105 · Vendor Advisory
• https://git.kernel.org/stable/c/421cea4f71f7cf65abaae878562ee4aa2b684628 · Patch
• https://git.kernel.org/stable/c/0d3c014a84396a147705f523a8fd6fc873e76502 · Patch
• https://git.kernel.org/stable/c/a812008fe3a0aebb778d277b35717f64e23d0302 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43105 · Security Note
• https://ubuntu.com/security/CVE-2026-43105 · Vendor Advisory
• https://git.kernel.org/linus/f4dfd6847b3e5d24e336bca6057485116d17aea4 · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-43105 · Note
• https://t.me/CVEtracker/52828 · Telegram Post