Linux CVE-2026-23418

The vulnerability exists in the Linux kernel's DRM (Direct Rendering Manager) XE graphics driver subsystem, specifically in the register save-restore (reg_sr) functionality. The root cause is improper error handling in memory allocation and xarray (xa_store) operations-when xa_store() fails during registration of a dynamically allocated entry, the function returns without freeing the previously allocated memory structure. This is a classic resource leak vulnerability (CWE-401: Missing Release of Memory after Effective Lifetime). The xarray is a Linux kernel data structure used for efficient sparse array management. The fix introduces a goto-based error handling path (fail_free label) to ensure cleanup occurs on xa_store() failure, following kernel coding best practices.