CVE-2026-23426
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the logicvc DRM driver in the Linux kernel, a device node reference leak occurs in logicvc_drm_config_parse(). The of_get_child_by_name() function does not release the reference to the found 'layers' node.
Risk Assessment
Reference leak can exhaust kernel resources and cause system instability, especially during repeated configuration parsing.
Recommendation
Apply the patch that uses the __free(device_node) attribute to automatically release the reference when the variable goes out of scope.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() The logicvc_drm_config_parse() function calls of_get_child_by_name() to find the "layers" node but fails to release the reference, leading to a device node reference leak. Fix this by using the __free(device_node) cleanup attribute to automatic release the reference when the variable goes out of scope.