CVE-2026-53141

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/06/2026
Last modified:
07/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/v3d: Fix global performance monitor reference counting<br /> <br /> In the SET_GLOBAL ioctl, v3d_perfmon_find() bumps the reference count on<br /> the perfmon it returns, but v3d_perfmon_set_global_ioctl() and<br /> v3d_perfmon_delete() fail to release that reference on several paths:<br /> <br /> 1. v3d_perfmon_set_global_ioctl() leaks the reference on its error<br /> paths.<br /> <br /> 2. CLEAR_GLOBAL leaks both the find reference and the reference<br /> previously stashed in v3d-&gt;global_perfmon by the SET_GLOBAL ioctl<br /> that configured it.<br /> <br /> 3. Destroying a perfmon that is the current global perfmon leaks the<br /> reference stashed by the SET_GLOBAL ioctl.<br /> <br /> Release each of these references explicitly.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.14 (including) 6.18.36 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 7.0.13 (excluding)
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*