CVE-2026-72361
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/hw_engine: Fix double-free of managed BO in error path The error path in hw_engine_init() explicitly frees a BO allocated with xe_managed_bo_create_pin_map() via xe_bo_unpin_map_no_vm(). Since the managed BO already has a devm cleanup action registered, this causes a double-free when devm unwinds during probe failure. Remove the explicit free and let devm handle it, consistent with all other xe_managed_bo_create_pin_map() callers. (cherry picked from commit e459a3bdeb117be496d7f229e2ea1f6c9fe4080b)
How to fix
- Linux Linux1f6b44d555ecce61e249220f2ca4d75cdb90caf6, a0a56b4480a0dc921a42cd70e9fc081a12ab8359, 23ee91355e31947595b86ebb9ef4664f20fd926d, 7ac3cae7a251d28e9079de07a991bd4eb2bb7fd8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0e1a47fcabc8ffa6f460c60c2caa04e51170fa22 ≤ v < 1f6b44d555ecce61e249220f2ca4d75cdb90caf6, 0e1a47fcabc8ffa6f460c60c2caa04e51170fa22 ≤ v < a0a56b4480a0dc921a42cd70e9fc081a12ab8359, 0e1a47fcabc8ffa6f460c60c2caa04e51170fa22 ≤ v < 23ee91355e31947595b86ebb9ef4664f20fd926d, 0e1a47fcabc8ffa6f460c60c2caa04e51170fa22 ≤ v < 7ac3cae7a251d28e9079de07a991bd4eb2bb7fd8, 6.8 | 1f6b44d555ecce61e249220f2ca4d75cdb90caf6, a0a56b4480a0dc921a42cd70e9fc081a12ab8359, 23ee91355e31947595b86ebb9ef4664f20fd926d, 7ac3cae7a251d28e9079de07a991bd4eb2bb7fd8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.