PT-2026-61367 · Linux · Linux

CVE-2026-64050 · Publicado 2026-07-19 · Atualizado 2026-07-19

Mitre

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dpu: don't mix devm and drmm functions

Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed because of the use of devm kzalloc()), while the usersoace still can try interacting with the WB connector (which uses drmm functions).

Change dpu writeback init() to use drmm .

Patchwork: https://patchwork.freedesktop.org/patch/722656/

Correção

Identificadores relacionados

CVE-2026-64050

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/c0c70a11365cba7fba25a77463582bcec0f7846e · Nota
• https://git.kernel.org/stable/c/95048a12f48c627bc2ccc4d84f87640630ba2bdb · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64050 · Nota de Segurança
• https://git.kernel.org/stable/c/ff58e5ef1b46ce614af048d2d04986df05ffab90 · Nota