CVE-2026-74393

high

Description

In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Commit 18226ba52159 ("drm/syncobj: reject invalid flags in drm_syncobj_find_fence") forgot to take into account the fact that drm_syncobj_find() takes a reference to syncobj and returns early without dropping the reference, leading to memory leaks. Reported by: Sam Spencer <[email protected]>

References

https://git.kernel.org/stable/c/e5b93bd6fdb92aa5e4689715d7e8487d9ce66a38

https://git.kernel.org/stable/c/e245f3491bf30a758786a4424854f61fee472308

https://git.kernel.org/stable/c/7471006cd854d159723344be809e8287a2d75502

https://git.kernel.org/stable/c/5c5994a1204743fa55e4c198ed93a6c36f21cd1f

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-59540

Details

Source: Mitre, NVD

Published: 2026-08-15

Updated: 2026-08-17

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.4

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00209