CVE-2026-23421: 
Linux Kernel vulnerability analysis and mitigation

CVE-2026-23421 is a memory leak vulnerability in the Linux kernel's DRM/XE configfs subsystem, specifically in the drm/xe/configfs component. The flaw arises because ctx_restore_mid_bb memory allocated in wa_bb_store() is never freed by xe_config_device_release(), which only releases ctx_restore_post_bb. Affected kernel versions include 6.18.x (before 6.18.17), 6.19.x (before 6.19.7), and 7.0 release candidates up to rc2. It was disclosed on April 3, 2026, and carries a CVSS v3.1 base score of 5.5 (Medium) (Red Hat Advisory, Github Advisory).

The root cause is classified as CWE-772 (Missing Release of Resource after Effective Lifetime): the ctx_restore_mid_bb[0].cs buffer is allocated during wa_bb_store() but is never freed when the configfs device is removed via xe_config_device_release() (Red Hat Bugzilla). An attacker or unprivileged local user with access to the configfs interface can repeatedly add and remove the XE configfs device, causing cumulative kernel memory leakage with each cycle. The fix, cherry-picked from upstream commit a235e7d0098337c3f2d1e8f3610c719a589e115f, adds the missing kfree call for ctx_restore_mid_bb[0].cs in the release path (Github Advisory).

Exploitation of this vulnerability is limited to availability impact — there is no confidentiality or integrity risk. A local user with low privileges can trigger repeated device add/remove cycles to exhaust kernel memory, leading to system instability, performance degradation, and potential denial of service. The scope is unchanged, meaning the impact is confined to the affected kernel component and the host system (Red Hat Advisory, Github Advisory).

Update to a patched Linux kernel version: 6.18.17 or later, 6.19.7 or later, or 7.0-rc3 or later. Reference patches are available at the following kernel.org commits: 3557359ea3df32430ea7c30f7a708ca9a91d7e0e, 7f971dfd48983074adc7bbcea3ee95ce7aad47cb, and e377182f0266f46f02d01838e6bde67b9dac0d66 (Github Advisory). If immediate patching is not feasible, restrict local user access to configfs interfaces and monitor for unusual memory consumption or system instability associated with XE GPU device operations (Red Hat Advisory).