Description
In the Linux kernel, the following vulnerability has been resolved:

drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()

The logicvc_drm_config_parse() function calls of_get_child_by_name() to
find the "layers" node but fails to release the reference, leading to a
device node reference leak.

Fix this by using the __free(device_node) cleanup attribute to automatic
release the reference when the variable goes out of scope.
Published: 2026-04-03
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Reference leak in Linux kernel DRM logicvc driver could lead to kernel resource exhaustion.
Action: Apply Patch
AI Analysis

Impact

The logicvc_drm_config_parse() function in the Linux kernel's DRM logicvc driver retrieves a device node by name but fails to release its reference, creating a reference leak that falls under CWE-911. Over time this leak can consume kernel memory and other resources, potentially destabilizing the kernel or causing a denial of service.

Affected Systems

Systems running any Linux kernel that includes the logicvc DRM driver are susceptible. No specific version identifiers are supplied, so every kernel build containing the unpatched logicvc component may be affected.

Risk and Exploitability

The CVE does not provide a CVSS score or EPSS estimate, and it is not listed in the CISA KEV catalog. Because the flaw resides in kernel space, exploitation would require privileges that can access the DRM subsystem, implying a local‑privilege or system‑wide escalation scenario. No exploit has yet been reported, and no remote code execution vector has been identified. The likely attack vector is inferred to involve triggering logicvc_drm_config_parse() through DRM configuration, which typically requires system privileges. The primary risk is gradual resource exhaustion leading to availability problems.

Generated by OpenCVE AI on April 4, 2026 at 03:55 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the patch or upgrade to a kernel version that incorporates the logicvc reference‑release fix.
  • If an upgrade is not immediately possible, disable the logicvc DRM driver or remove it from the kernel configuration.

Generated by OpenCVE AI on April 4, 2026 at 03:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 23 Apr 2026 21:15:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-Other
CPEs cpe:2.3:o:linux:linux_kernel:6.0:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}


Sat, 04 Apr 2026 01:15:00 +0000


Fri, 03 Apr 2026 14:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() The logicvc_drm_config_parse() function calls of_get_child_by_name() to find the "layers" node but fails to release the reference, leading to a device node reference leak. Fix this by using the __free(device_node) cleanup attribute to automatic release the reference when the variable goes out of scope.
Title drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-04-13T06:07:13.131Z

Reserved: 2026-01-13T15:37:46.015Z

Link: CVE-2026-23426

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-04-03T14:16:28.890

Modified: 2026-04-23T21:04:06.670

Link: CVE-2026-23426

cve-icon Redhat

Severity :

Publid Date: 2026-04-03T00:00:00Z

Links: CVE-2026-23426 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-07T07:54:54Z

Weaknesses