Strix
57.7K

CVE-2026-74393

UnknownEPSS 0.17%

Last modified

CVE-2026-74393 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Commit 18226ba52159 ("drm/syncobj: reject invalid flags in drm_syncobj_find_fence") forgot to take into account the fact that drm_syncobj_find() takes a reference to syncobj and returns early without dropping the reference, leading to memory leaks. Reported by: Sam Spencer <sam.spencer@arm.com>. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Commit 18226ba52159 ("drm/syncobj: reject invalid flags in drm_syncobj_find_fence") forgot to take into account the fact that drm_syncobj_find() takes a reference to syncobj and returns early without dropping the reference, leading to memory leaks. Reported by: Sam Spencer <sam.spencer@arm.com>

Metrics

EPSS Probability
0.17%

6.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 18226ba52159257d4c2f777a168cc09adb3c1ac0, < e245f3491bf30a758786a4424854f61fee472308; >= 18226ba52159257d4c2f777a168cc09adb3c1ac0, < 7471006cd854d159723344be809e8287a2d75502; >= 18226ba52159257d4c2f777a168cc09adb3c1ac0, < 5c5994a1204743fa55e4c198ed93a6c36f21cd1f; >= 18226ba52159257d4c2f777a168cc09adb3c1ac0, < e5b93bd6fdb92aa5e4689715d7e8487d9ce66a38
LinuxLinux6.9

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-74393?
In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Commit 18226ba52159 ("drm/syncobj: reject invalid flags in drm_syncobj_find_fence") forgot to take into account the fact that drm_syncobj_find() takes a reference to syncobj and returns early without dropping the reference, leading to memory leaks. Reported by: Sam Spencer <sam.spencer@arm.com>
How severe is CVE-2026-74393?
Severity scoring for CVE-2026-74393 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-74393?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-74393?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST