CVE-2026-53140 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups v3d_rewrite_csd_job_wg_counts_from_indirect() maps both the indirect buffer and the workgroup buffer and is expected to release them before returning. When any of the workgroup counts read from the buffer is zero, the function bailed out early and skipped the cleanup, leaking the vaddr mappings of both BOs. Jump to the cleanup path instead of returning directly, so the mappings are always dropped.
A vulnerability in the Linux kernel's V3D Direct Rendering Manager (DRM) subsystem has been addressed. The issue involved a memory leak of virtual address mappings when an indirect Compute Shader Dispatch (CSD) job had zeroed workgroup counts. The function responsible for handling these jobs mapped both the indirect buffer and the workgroup buffer, but failed to properly release them if any workgroup count was zero, leading to a leak of the buffer object mappings. This vulnerability affects the Linux kernel stable tree.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is available in the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0b59d0946913a0df7d1a033013e259e9b6a76546 | kernel.org | Patch |
| https://git.kernel.org/stable/c/60ebeb23eaf3d7fd2e0551fe304309305e31d424 | kernel.org | Patch |
| https://git.kernel.org/stable/c/90b629269088a9fe24a02c032be9f08357f47873 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ae7676952790f421c40918e2586a2c9f12a682b6 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.8, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 6, 2026 | Initial Analysis | [email protected] |
| Jun 25, 2026 | New CVE Received | kernel.org |