Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix global performance monitor reference counting In the SET_GLOBAL ioctl, v3d_perfmon_find() bumps the reference count on the perfmon it returns, but v3d_perfmon_set_global_ioctl() and v3d_perfmon_delete() fail to release that reference on several paths: 1. v3d_perfmon_set_global_ioctl() leaks the reference on its error paths. 2. CLEAR_GLOBAL leaks both the find reference and the reference previously stashed in v3d->global_perfmon by the SET_GLOBAL ioctl that configured it. 3. Destroying a perfmon that is the current global perfmon leaks the reference stashed by the SET_GLOBAL ioctl. Release each of these references explicitly.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected c6eabbab359c156669e10d5dec3e71e80ff09bd2 before 3e1947573140a57119294f0bff39ee18d93f23e1; affected c6eabbab359c156669e10d5dec3e71e80ff09bd2 before ed2eaf3b7b1820b690e4b896d344e00027526a25; affected c6eabbab359c156669e10d5dec3e71e80ff09bd2 before 6bf7e2affc6e62da7add393d7f352d4040f5bc27 |
| Linux / Linux | affected 6.14; unaffected 0 before 6.14; unaffected 6.18.36 through 6.18.*; unaffected 7.0.13 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.