The virtio GPU driver in the Linux kernel contains a flaw in virtio_gpu_resource_create_blob_ioctl() where it releases a reference on error paths using drm_gem_object_release() instead of dropping the reference it owns, causing obj->funcs->free() never to run. The virtio_gpu_object, the resource identifier, and the host‑side resource are leaked, potentially building up unbounded kernel memory consumption and resource exhaustion.

Any Linux kernel that implements the virtio GPU DRM subsystem without the fix—identified by the CPE for linux_kernel—remains vulnerable. This includes mainstream distributions running a kernel that predates the commit adding drm_gem_object_put(), especially in environments that provide virtio GPU devices to user space applications or virtual machines.

Although no CVSS or EPSS score is published and the vulnerability is not listed in CISA KEV, the accumulation of leaked resources can lead to denial of service. The likely attack vector is an attacker with ability to invoke the ioctl, such as a privileged user or a malicious virtual machine granted access to the virtio GPU device, which can deliberately trigger the error condition and exhaust kernel memory over time.