CVE-2026-93059
drm/msm: Fix task_struct reference leak in recover_worker
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.18.52, 7.2.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix task_struct reference leak in recover_worker get_pid_task() increments the task reference count, but the corresponding put_task_struct() was missing in the else branch, leaking a reference on every GPU hang recovery. Patchwork: https://patchwork.freedesktop.org/patch/730662/
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 25654a1756a4ace072404e89882d7ba8391900bd · fixed in 6c472fde2c8096e16bb46b0605adda2488f300c0; From 25654a1756a4ace072404e89882d7ba8391900bd · fixed in d684f756d029d81db1cd64cd9645556e53fcc784; From 25654a1756a4ace072404e89882d7ba8391900bd · fixed in 40b793714ad8f393ab3d469f9d00b20ebda46257
- Linux Linux
6.17
- KernelLinux
From 6.17.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.6