Executive brief
A memory leak vulnerability was identified in the Linux kernel's Direct Rendering Manager (DRM) subsystem, specifically within the color management component. This component is responsible for handling how colors are displayed on screen. If exploited, this flaw could lead to a gradual depletion of system memory, potentially causing system instability or a denial of service over time.
Technical details
A memory leak exists in the drm_colorop component of the Linux kernel due to improper reference tracking of blob properties during the state lifecycle. Specifically, drm_colorop_atomic_destroy_state() freed state memory without releasing the associated blob reference, and drm_colorop_reset() used kfree() directly instead of the proper destruction path. This failure to follow established DRM state management patterns results in leaked blob references during state duplication, destruction, and reset operations. An attacker with local access could potentially trigger these operations to exhaust system memory. The issue has been resolved by implementing proper reference counting helpers and ensuring the common destruction path is used across the lifecycle.
Affected products
- Linux Linux Kernel 6.19 to 7.0.9
Timeline
- 2026-03-12: other: Patch authored
- 2026-07-19: disclosed: CVE published