Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix sync entry leak on OA config emit failure xe_oa_emit_oa_config()… (CVE-2026-80903)

The Linux kernel vulnerability CVE-2026-80903 involves a sync entry leak in the drm/xe/oa driver. The function xe_oa_emit_oa_config() only releases sync entries and the syncs array on successful execution. If the function fails early (e.g., during fence allocation, config buffer allocation, or batch submission), it returns without cleaning up the stream->syncs array. While the stream open path handles such failures properly, the xe_oa_config_locked() function propagates the error without cleanup, causing the syncs array and fence references to leak. Subsequent config ioctl calls overwrite stream->syncs, making the leaked memory unreachable. The fix ensures that parsed syncs are cleaned up on failure, matching the cleanup behavior of the stream open error path.

The vulnerability causes a memory leak in the kernel's drm/xe/oa component. While it does not directly indicate a security impact such as code execution or privilege escalation, memory leaks in kernel space can degrade system stability or potentially be leveraged in complex attack scenarios. No known exploits are reported in the wild.

A fix for this vulnerability has been applied in the Linux kernel source code as indicated by the referenced commit. Users should update to the fixed kernel version containing this patch. Since no vendor advisory or patch links are provided, check the official Linux kernel repositories or distribution advisories for the specific patch or updated kernel versions. No additional mitigation is indicated.