CVE-2026-23426

The logicvc_drm_config_parse() function in the Linux kernel’s DRM logicvc driver retrieves a device node named "layers" by calling of_get_child_by_name(), but the function fails to release the reference to this node. This omission creates a device node reference leak, which is a form of resource management flaw identified as CWE‑911. The leak may cause kernel memory or object references to accumulate over time if the function is invoked repeatedly.

Systems running the Linux kernel v6.0 or any 7.0 release candidate (rc1 through rc7) that include the logicvc DRM driver are affected. The vulnerability is present in all builds of these kernel releases that have not incorporated the upstream fix.

To trigger the leak, an attacker would need to cause the kernel to execute logicvc_drm_config_parse() by providing a DRM configuration that references a device node named "layers" or by manipulating the device tree. The likely attack vector is local and requires elevated privileges, as configuring the DRM subsystem typically demands administrative access. Based on the CVSS score of 5.5 and an EPSS score of less than 1 %, the overall risk is moderate, but exploitation probability is low. The vulnerability is not listed in the CISA KEV catalog.