CVE-2026-93059: drm/msm: Fix task_struct reference leak in recover_worker

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix task_struct reference leak in recover_worker get_pid_task() increments the task reference count, but the corresponding put_task_struct() was missing in the else branch, leaking a reference on every GPU hang recovery. Patchwork: https://patchwork.freedesktop.org/patch/730662/

Affected products

Linux kernel: 6.17 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/40b793714ad8f393ab3d469f9d00b20ebda46257
https://git.kernel.org/stable/c/6c472fde2c8096e16bb46b0605adda2488f300c0
https://git.kernel.org/stable/c/d684f756d029d81db1cd64cd9645556e53fcc784

Get alerted when CVE-2026-93059 or the next vulnerability affects your stack