CVE-2026-53141

Source
https://cve.org/CVERecord?id=CVE-2026-53141
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53141.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-53141
Downstream
Published
2026-06-25T08:38:29.283Z
Modified
2026-07-17T21:07:32.875969652Z
Summary
drm/v3d: Fix global performance monitor reference counting
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Fix global performance monitor reference counting

In the SETGLOBAL ioctl, v3dperfmonfind() bumps the reference count on the perfmon it returns, but v3dperfmonsetglobalioctl() and v3dperfmon_delete() fail to release that reference on several paths:

  1. v3dperfmonsetglobalioctl() leaks the reference on its error paths.

  2. CLEARGLOBAL leaks both the find reference and the reference previously stashed in v3d->globalperfmon by the SET_GLOBAL ioctl that configured it.

  3. Destroying a perfmon that is the current global perfmon leaks the reference stashed by the SET_GLOBAL ioctl.

Release each of these references explicitly.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53141.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c6eabbab359c156669e10d5dec3e71e80ff09bd2
Fixed
3e1947573140a57119294f0bff39ee18d93f23e1
Fixed
ed2eaf3b7b1820b690e4b896d344e00027526a25
Fixed
6bf7e2affc6e62da7add393d7f352d4040f5bc27

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53141.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.14.0
Fixed
6.18.36
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.13

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53141.json"