CVE-2026-23426: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
In the Linux kernel, the following vulnerability has been resolved:
drm/logicvc: Fix device node reference leak in logicvcdrmconfigparse()
The logicvcdrmconfigparse() function calls ofgetchildbyname() to find the "layers" node but fails to release the reference, leading to a device node reference leak.
Fix this by using the free(devicenode) cleanup attribute to automatic release the reference when the variable goes out of scope.
Affected Software
Event History
Frequently Asked Questions
Who is exposed and what access does an attacker need?
Systems using the Linux kernel's LogicVC DRM driver are relevant. Exploitation requires local access and low-privileged access according to the CVSS vector; no user interaction is required.
What is the practical impact?
The issue is a device-tree node reference leak when logicvc_drm_config_parse() obtains the "layers" child node. Its documented impact is availability only, with no confidentiality or integrity impact in the supplied CVSS vector.
What can be done if an update cannot be applied immediately?
The supplied data identifies fixes in the referenced Linux stable kernel commits. If patching cannot happen immediately, no specific workaround or detection method is provided.