CVE-2026-93059drm/msm: Fix task_struct reference leak in recover_worker
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix task_struct reference leak in recover_worker get_pid_task() increments the task reference count, but the corresponding put_task_struct() was missing in the else branch, leaking a reference on every GPU hang recovery. Patchwork: https://patchwork.freedesktop.org/patch/730662/
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 25654a1756a4ace072404e89882d7ba8391900bd builds before 6c472fde2c8096e16bb46b0605adda2488f300c0; from 25654a1756a4ace072404e89882d7ba8391900bd before d684f756d029d81db1cd64cd9645556e53fcc784; 25654a1756a4ace072404e89882d7ba8391900bd builds before 40b793714ad8f393ab3d469f9d00b20ebda46257 | CNA record |
References
- https://git.kernel.org/stable/c/6c472fde2c8096e16bb46b0605adda2488f300c0
- https://git.kernel.org/stable/c/d684f756d029d81db1cd64cd9645556e53fcc784
- https://git.kernel.org/stable/c/40b793714ad8f393ab3d469f9d00b20ebda46257
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.