CVE-2026-53378

In the Linux kernel, the following vulnerability has been resolved:

drm/colorop: Fix blob property reference tracking in state lifecycle

The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the established pattern from drm_crtc's handling of DEGAMMA/GAMMA blob properties.

Issues fixed: - drmcoloropatomicdestroystate() was freeing state memory without releasing the blob reference, causing a leak - drmcoloropreset() was directly freeing old state with kfree() instead of properly destroying it, leaking blob references - drmcoloropcleanup() had duplicate blob cleanup code

Changes: - Add _drmatomichelpercoloropdestroystate() helper to properly release blob references before freeing state memory - Update drmcoloropatomicdestroystate() to call the helper - Fix drmcoloropreset() to use drmcoloropatomicdestroystate() for proper cleanup of old state - Simplify drmcoloropcleanup() to use the common destruction path

This matches the well-tested pattern used by drm_crtc since 2016 and ensures proper reference counting throughout the state lifecycle.

Co-developed by Claude Sonnet 4.5.