CVE-2026-43269

Description

A flaw was found in the Linux kernel's drm/atmel-hlcdc component. The atomic_destroy_state callback in the drm/atmel-hlcdc driver does not correctly release all allocated objects, specifically drm_crtc_commit objects. This oversight leads to a memory leak, where system memory gradually increases. Over extended periods, this can result in resource exhaustion and a Denial of Service (DoS) for the affected system.

Understanding the Weakness (CWE)

Integrity,Availability,Confidentiality

Technical Impact: Modify Memory; DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands

This weakness may result in the corruption of memory, and perhaps instructions, possibly leading to a crash. If the corrupted memory can be effectively controlled, it may be possible to execute arbitrary code.

Frequently Asked Questions

Want to get errata notifications? Sign up here.