Reference Leak in Linux Kernel Affecting Adreno GPU Drivers

CVE-2026-64154

What is CVE-2026-64154?

A vulnerability in the Linux kernel, specifically within the Adreno GPU driver initialization function a6xx_gpu_init(), has been identified. During the initialization process, a node is obtained through the of_parse_phandle() function. Although there was a manual reference release at the end of the common execution path, some early return conditions do not execute this cleanup code. This oversight leads to a reference leak, which can potentially impact system stability and performance. The issue has been rectified by employing the __free(device_node) cleanup handler, ensuring that references are properly released when they go out of scope.

References