Impact
The logicvc_drm_config_parse() function in the Linux kernel's DRM logicvc driver retrieves a device node by name but fails to release its reference, creating a reference leak that falls under CWE-911. Over time this leak can consume kernel memory and other resources, potentially destabilizing the kernel or causing a denial of service.
Affected Systems
Systems running any Linux kernel that includes the logicvc DRM driver are susceptible. No specific version identifiers are supplied, so every kernel build containing the unpatched logicvc component may be affected.
Risk and Exploitability
The CVE does not provide a CVSS score or EPSS estimate, and it is not listed in the CISA KEV catalog. Because the flaw resides in kernel space, exploitation would require privileges that can access the DRM subsystem, implying a local‑privilege or system‑wide escalation scenario. No exploit has yet been reported, and no remote code execution vector has been identified. The likely attack vector is inferred to involve triggering logicvc_drm_config_parse() through DRM configuration, which typically requires system privileges. The primary risk is gradual resource exhaustion leading to availability problems.
OpenCVE Enrichment