The Linux kernel's drm/colorop subsystem had a vulnerability involving memory leaks caused by incorrect reference tracking of blob properties in the state lifecycle. Specifically, drm_colorop_atomic_destroy_state() freed state memory without releasing blob references, drm_colorop_reset() improperly freed old state memory directly, and drm_colorop_cleanup() contained duplicate cleanup code. The fix introduced a helper function __drm_atomic_helper_colorop_destroy_state() to correctly release blob references before freeing memory and updated the affected functions to use this helper, aligning with the well-tested drm_crtc pattern since 2016. This correction ensures proper reference counting and prevents memory leaks during state duplication, destruction, and reset operations.

The vulnerability leads to memory leaks in the Linux kernel's drm/colorop component during state lifecycle operations. While memory leaks can degrade system stability or performance over time, no direct exploitation or other impacts such as privilege escalation or code execution are indicated. There are no known exploits in the wild for this issue.

A fix has been implemented in the Linux kernel to address this vulnerability by properly managing blob property references during state lifecycle operations. Users should apply the official kernel updates that include this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the current remediation guidance.