CVE-2026-53141

A flaw was found in the Linux kernel's Broadcom V3D graphics driver. Improper reference counting during global performance monitor management fails to release object references on error and cleanup paths. A local user could exploit this flaw by issuing specific requests through the Direct Rendering Manager (DRM) interface, causing memory leaks that may result in a Denial of Service (DoS).

This vulnerability is evaluated with a Moderate impact because exploitation is restricted to local users interacting with the Direct Rendering Manager (DRM) interface, limiting the blast radius to a denial of service through memory leaks rather than arbitrary code execution. Red Hat Enterprise Linux environments are not affected by this flaw, as the vulnerable subsystem code introduced in newer upstream kernels is absent from all supported releases. Additionally, the Broadcom V3D driver targets specific embedded graphics hardware not typically deployed across enterprise server installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.