---
id: CVE-2026-23418
title: 'drm/xe/reg_sr: Fix leak on xa_store failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/xe/reg_sr: Fix leak on xa_store failure

  Free the newly allocated entry when xa_store() fails to avoid a memory
  leak on the error path.

  v2: use goto fail_free. (Ba…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e5283bd4dfecbd3335f43b62a68e24dae23f59e4 <
    05e3f01974d09d1b746dedf4144f708b5033e76f
  - >-
    Linux >= e5283bd4dfecbd3335f43b62a68e24dae23f59e4 <
    4f461da14c7b226d1c4c179ae69956ccb8e134e2
  - >-
    Linux >= e5283bd4dfecbd3335f43b62a68e24dae23f59e4 <
    3091723785def05ebfe6a50866f87a044ae314ba
  - Linux 6.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:30:26.298494Z'
published: '2026-04-03'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:46.211Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23418'
references:
  - url: 'https://git.kernel.org/stable/c/05e3f01974d09d1b746dedf4144f708b5033e76f'
  - url: 'https://git.kernel.org/stable/c/4f461da14c7b226d1c4c179ae69956ccb8e134e2'
  - url: 'https://git.kernel.org/stable/c/3091723785def05ebfe6a50866f87a044ae314ba'
tags:
  - cve.org
epss: 0.00117
epssPercentile: 0.01686
ingestedAt: '2026-11-05T22:38:32.130Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/reg_sr: Fix leak on xa_store failure

Free the newly allocated entry when xa_store() fails to avoid a memory
leak on the error path.

v2: use goto fail_free. (Bala)

(cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb)

## Affected

- `Linux >= e5283bd4dfecbd3335f43b62a68e24dae23f59e4 < 05e3f01974d09d1b746dedf4144f708b5033e76f`
- `Linux >= e5283bd4dfecbd3335f43b62a68e24dae23f59e4 < 4f461da14c7b226d1c4c179ae69956ccb8e134e2`
- `Linux >= e5283bd4dfecbd3335f43b62a68e24dae23f59e4 < 3091723785def05ebfe6a50866f87a044ae314ba`
- `Linux 6.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.