CVE-2026-93059: drm/msm: Fix task_struct reference leak in recover_worker
In the Linux kernel, the following vulnerability has been resolved:
drm/msm: Fix taskstruct reference leak in recoverworker
getpidtask() increments the task reference count, but the corresponding puttaskstruct() was missing in the else branch, leaking a reference on every GPU hang recovery.
Patchwork: https://patchwork.freedesktop.org/patch/730662/
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 730662
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Systems running the Linux kernel's drm/msm graphics driver are exposed when GPU hang recovery occurs. Each affected recovery can leak a task_struct reference.
What event is required to trigger the leak?
A GPU hang recovery must occur. The missing put_task_struct() affects the else branch after get_pid_task() has incremented the task reference count.
How can I tell whether a system may already be affected?
Review whether the system uses the drm/msm driver and has experienced GPU hang recoveries. The provided information does not specify a direct runtime indicator or a method to quantify leaked references.