Executive brief
A vulnerability in the Linux kernel's Samsung display driver could allow a local user to cause a memory leak. This occurs when the system fails to properly clean up resources during certain display initialization errors. Over time, repeated occurrences could exhaust system memory, potentially leading to a system crash or reduced performance.
Technical details
A memory leak exists in the samsung-dsim bridge driver within the samsung_dsim_host_attach() function. When drm_bridge_add() is called to register a bridge, subsequent failures in samsung_dsim_register_te_irq() or the host's attach operation do not trigger a corresponding drm_bridge_remove() call. This results in allocated resources remaining in memory after the function returns an error. An attacker with local access could potentially trigger these error paths to exhaust kernel memory. The fix introduces proper goto labels to ensure drm_bridge_remove() and samsung_dsim_unregister_te_irq() are called during error cleanup.
Affected products
- Linux Linux Kernel 6.13 to 6.18.19, 6.7 to 6.12.78, 6.19 to 6.19.9, 6.4 to 6.6.130, 7.0-rc1
Timeline
- 2026-02-09: other: Patch authored
- 2026-05-08: advisory: CVE published
References
- https://git.kernel.org/stable/c/0b07f7d2c5a4078c2f1c11bb36685084fe4e5c95
- https://git.kernel.org/stable/c/803ec1faf7c1823e6e3b1f2aaa81be18528c9436
- https://git.kernel.org/stable/c/98310fe3a2a79671b739a5344c1a11d74c503e25
- https://git.kernel.org/stable/c/a40b92fb4b26d4cb1b5e439e55a56db7e79a82d1
- https://git.kernel.org/stable/c/e6d779654cda63d632bd8dfcdcabd125057e30a5