Description
In the Linux kernel, the following vulnerability has been resolved:

drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()

The logicvc_drm_config_parse() function calls of_get_child_by_name() to
find the "layers" node but fails to release the reference, leading to a
device node reference leak.

Fix this by using the __free(device_node) cleanup attribute to automatic
release the reference when the variable goes out of scope.
Published: 2026-04-03
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: Device Node Reference Leak
Action: Apply Patch
AI Analysis

Impact

The Linux kernel’s DRM logicvc driver has a flaw where the function logicvc_drm_config_parse obtains a reference to a device node but never releases it, which can cause the node’s reference count to grow without bound. Based on the description, it is inferred that this leak could lead to resource exhaustion or kernel instability if it accumulates over time. The weakness is improper resource cleanup, corresponding to CWE‑772.

Affected Systems

The vulnerability affects any Linux kernel that contains the unpatched logicvc DRM component. Because the driver is part of the core kernel, the flaw is independent of distribution and applies to all releases that still include the legacy logicvc implementation. No specific affected version range is listed, so all kernels prior to the inclusion of the fix are potentially impacted.

Risk and Exploitability

The CVSS score, EPSS score, and KEV status are not provided, indicating a lack of published severity metrics or known widespread exploitation. Based on the description, it is inferred that an attacker would need to load or reconfigure the logicvc driver to invoke logicvc_drm_config_parse and trigger the reference leak repeatedly. The risk stems from possible uncontrolled resource consumption, but the practical exploitability remains uncertain without further evidence.

Generated by OpenCVE AI on April 3, 2026 at 18:05 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a recent kernel update that contains the logicvc_drm_config_parse device node reference leak fix.
  • If an immediate update is not feasible, disable the logicvc DRM driver until a patch is available.
  • Monitor system logs for indications of device node reference leaks or abnormal driver activity.
  • Verify that no unpatched logicvc sources are present in custom kernel builds.

Generated by OpenCVE AI on April 3, 2026 at 18:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 04 Apr 2026 01:15:00 +0000


Fri, 03 Apr 2026 14:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() The logicvc_drm_config_parse() function calls of_get_child_by_name() to find the "layers" node but fails to release the reference, leading to a device node reference leak. Fix this by using the __free(device_node) cleanup attribute to automatic release the reference when the variable goes out of scope.
Title drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-04-03T13:24:34.276Z

Reserved: 2026-01-13T15:37:46.015Z

Link: CVE-2026-23426

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-04-03T14:16:28.890

Modified: 2026-04-03T16:10:23.730

Link: CVE-2026-23426

cve-icon Redhat

Severity :

Publid Date: 2026-04-03T00:00:00Z

Links: CVE-2026-23426 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-03T21:16:28Z

Weaknesses