PT-2026-52286

CVE-2026-53190

·

Published

2026-06-08

·

Updated

2026-10-18

Description by

CVSS 2.0
5.5
Medium
MetricsAV:A/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A reference count leak occurs in the virtio gpu dma fence wait() function within the drm/virtio component. The issue arises because dma fence unwrap for each() calls dma fence unwrap first(), which increments the reference count of the fence. While normal loop completion releases this reference via dma fence unwrap next(), an early return triggered by a failure in virtio gpu do fence wait() prevents the cursor->chain reference from being released.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-90722
CLSA-2026-1786352940
OESA-2026-3204
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
USN-8726-1
USN-8726-2
USN-8726-3
USN-8726-4
USN-8727-1
USN-8728-1
USN-8728-2
USN-8728-3
USN-8760-1
USN-8760-2
USN-8800-1
USN-8903-1
USN-8903-2
USN-8904-1
USN-8905-1
USN-8905-2
USN-8906-1
Found an issue in the description? Have something to add? Feel free to write us 👾