CVE-2026-72361

Source
https://cve.org/CVERecord?id=CVE-2026-72361
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72361.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72361
Downstream
Published
2026-08-15T05:56:00.759Z
Modified
2026-08-18T03:30:53.641261379Z
Summary
drm/xe/hw_engine: Fix double-free of managed BO in error path
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/hw_engine: Fix double-free of managed BO in error path

The error path in hwengineinit() explicitly frees a BO allocated with xemanagedbocreatepinmap() via xebounpinmapnovm(). Since the managed BO already has a devm cleanup action registered, this causes a double-free when devm unwinds during probe failure.

Remove the explicit free and let devm handle it, consistent with all other xemanagedbocreatepin_map() callers.

(cherry picked from commit e459a3bdeb117be496d7f229e2ea1f6c9fe4080b)

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72361.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0e1a47fcabc8ffa6f460c60c2caa04e51170fa22
Fixed
1f6b44d555ecce61e249220f2ca4d75cdb90caf6
Fixed
a0a56b4480a0dc921a42cd70e9fc081a12ab8359
Fixed
23ee91355e31947595b86ebb9ef4664f20fd926d
Fixed
7ac3cae7a251d28e9079de07a991bd4eb2bb7fd8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72361.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72361.json"