PT-2026-44324 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-10 · CVE-2026-46201

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the drm/xe component when the xe gem prime import() function is called. Specifically, if the xe dma buf init obj() function fails, the attachment created by dma buf dynamic attach() is not properly detached, leading to a dma-buf attachment leak.

Recommendations Update the Linux kernel to a version that includes the fix for the xe gem prime import() function. As a temporary mitigation, restrict the use of the xe gem prime import() function if possible.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-46201

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 293

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46201.json · Exploit
• https://git.kernel.org/stable/c/111ab678471bf1f90d078d5513bb086b70596c3c · Patch
• https://git.kernel.org/stable/c/eea1e10f8d99c0f04deef707c99705b94bba3b78 · Patch
• https://git.kernel.org/stable/c/0afa8b1ef582ecf6fb04097fd356f8741e5005ed · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46201 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46201 · Vendor Advisory
• https://git.kernel.org/stable/c/d394669e194936d7ce15284a24a5ae334c4c5b74 · Patch
• https://ubuntu.com/security/CVE-2026-46201 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46201 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46201 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-46201 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-46201 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46201 · Security Note
• https://suse.com/security/cve/CVE-2026-46166 · Note