PT-2026-61083 · Linux · Linux Kernel

CVE-2026-53378 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Memory leaks occur in the drm/colorop state blob property handling during state duplication, destruction, and reset operations. The issue stems from a failure to follow established reference tracking patterns, specifically within the following functions:

• drm colorop atomic destroy state() frees state memory without releasing the blob reference.
• drm colorop reset() uses kfree() to free old state instead of properly destroying it, leading to leaked blob references.
• drm colorop cleanup() contains duplicate blob cleanup code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53378

Affected Products

Linux Kernel

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-53378 · Security Note
• https://git.kernel.org/stable/c/271059f1d9020e9ac967524e319fbbaa22d0475b · Note
• https://twitter.com/VulmonFeeds/status/2078815191983075362 · Twitter Post
• https://git.kernel.org/stable/c/235b333e2878d791cee09e1e72f44611a9400114 · Note