What’s Vulnerable › Vulnerabilities

CVE-2026-74393: drm/syncobj: Fix memory leak in drm_syncobj_find_fence()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Commit 18226ba52159 ("drm/syncobj: reject invalid flags in drm_syncobj_find_fence") forgot to take into account the fact that drm_syncobj_find() takes a reference to syncobj and returns early without dropping the reference, leading to memory leaks. Reported by: Sam Spencer <sam.spencer@arm.com>

Affected products

• Linux kernel: 6.9 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/5c5994a1204743fa55e4c198ed93a6c36f21cd1f
• https://git.kernel.org/stable/c/7471006cd854d159723344be809e8287a2d75502
• https://git.kernel.org/stable/c/e245f3491bf30a758786a4424854f61fee472308
• https://git.kernel.org/stable/c/e5b93bd6fdb92aa5e4689715d7e8487d9ce66a38

Get alerted when CVE-2026-74393 or the next vulnerability affects your stack