CVE-2026-53141
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/06/2026
Last modified:
07/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/v3d: Fix global performance monitor reference counting<br />
<br />
In the SET_GLOBAL ioctl, v3d_perfmon_find() bumps the reference count on<br />
the perfmon it returns, but v3d_perfmon_set_global_ioctl() and<br />
v3d_perfmon_delete() fail to release that reference on several paths:<br />
<br />
1. v3d_perfmon_set_global_ioctl() leaks the reference on its error<br />
paths.<br />
<br />
2. CLEAR_GLOBAL leaks both the find reference and the reference<br />
previously stashed in v3d->global_perfmon by the SET_GLOBAL ioctl<br />
that configured it.<br />
<br />
3. Destroying a perfmon that is the current global perfmon leaks the<br />
reference stashed by the SET_GLOBAL ioctl.<br />
<br />
Release each of these references explicitly.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.14 (including) | 6.18.36 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (including) | 7.0.13 (excluding) |
| cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



