Memory Leak Vulnerability in Linux Kernel Affecting Color Management

CVE-2026-53378

What is CVE-2026-53378?

A vulnerability in the Linux kernel's color management subsystem has been identified, whereby improper handling of blob property references leads to memory leaks during various state operations. Specifically, issues arose in functions handling state duplication, destruction, and reset, causing references to persist without being released. The affected functions failed to follow the established reference tracking pattern, resulting in leaked memory spaces. Recent updates aim to rectify these issues by introducing improved state management practices that ensure proper cleanup and reference counting in line with established standards used by drm_crtc since 2016.

References