Riskcovery

CVE-2026-53141

drm/v3d: Fix global performance monitor reference counting

State
Published
Severity
Not scored
Published
Jun 25, 2026
Updated
Jun 25, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Fix global performance monitor reference counting

In the SET_GLOBAL ioctl, v3d_perfmon_find() bumps the reference count on the perfmon it returns, but v3d_perfmon_set_global_ioctl() and v3d_perfmon_delete() fail to release that reference on several paths:

1. v3d_perfmon_set_global_ioctl() leaks the reference on its error paths.

2. CLEAR_GLOBAL leaks both the find reference and the reference previously stashed in v3d->global_perfmon by the SET_GLOBAL ioctl that configured it.

3. Destroying a perfmon that is the current global perfmon leaks the reference stashed by the SET_GLOBAL ioctl.

Release each of these references explicitly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c6eabbab359c156669e10d5dec3e71e80ff09bd2 to before 3e1947573140a57119294f0bff39ee18d93f23e1Affected
  • c6eabbab359c156669e10d5dec3e71e80ff09bd2 to before ed2eaf3b7b1820b690e4b896d344e00027526a25Affected
  • c6eabbab359c156669e10d5dec3e71e80ff09bd2 to before 6bf7e2affc6e62da7add393d7f352d4040f5bc27Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.