PT-2026-52237 · Linux · Linux

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-53141

Mitre

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Fix global performance monitor reference counting

In the SET GLOBAL ioctl, v3d perfmon find() bumps the reference count on the perfmon it returns, but v3d perfmon set global ioctl() and v3d perfmon delete() fail to release that reference on several paths:

1. v3d perfmon set global ioctl() leaks the reference on its error paths.
2. CLEAR GLOBAL leaks both the find reference and the reference previously stashed in v3d->global perfmon by the SET GLOBAL ioctl that configured it.
3. Destroying a perfmon that is the current global perfmon leaks the reference stashed by the SET GLOBAL ioctl.

Release each of these references explicitly.

Related Identifiers

CVE-2026-53141

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-53141 · Security Note
• https://git.kernel.org/stable/c/ed2eaf3b7b1820b690e4b896d344e00027526a25 · Note
• https://git.kernel.org/stable/c/3e1947573140a57119294f0bff39ee18d93f23e1 · Note
• https://git.kernel.org/stable/c/6bf7e2affc6e62da7add393d7f352d4040f5bc27 · Note