CVE-2026-53378: In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking i
Summary
A memory leak bug was found in the Linux kernel's display driver code where blob properties (large chunks of data used for color operations) were not being properly freed when display states were duplicated, destroyed, or reset. The fix involves creating a helper function to correctly release these blob references before freeing memory, and updating the affected functions to use this helper instead of their previous incorrect cleanup methods.
Solution / Mitigation
Add __drm_atomic_helper_colorop_destroy_state() helper to properly release blob references before freeing state memory. Update drm_colorop_atomic_destroy_state() to call this helper. Fix drm_colorop_reset() to use drm_colorop_atomic_destroy_state() for proper cleanup of old state instead of directly calling kfree(). Simplify drm_colorop_cleanup() to use the common destruction path.
Vulnerability Details
EPSS: 0.0%
July 19, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-53378
First tracked: July 19, 2026 at 08:07 AM
Classified by LLM (prompt v3) · confidence: 95%