In the Linux kernel, the following vulnerability has been resolved: drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() drm_gem_object_lookup will call drm_gem_object_get inside. So cursor_bo needs to be put when msm_gem_get_and_pin_iova fails.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2025022602-CVE-2022-49467-9d0a@gregkh/T