PT-2026-61367 · Linux · Linux

CVE-2026-64050 · Published 2026-07-19 · Updated 2026-07-19

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dpu: don't mix devm and drmm functions

Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed because of the use of devm kzalloc()), while the usersoace still can try interacting with the WB connector (which uses drmm functions).

Change dpu writeback init() to use drmm .

Patchwork: https://patchwork.freedesktop.org/patch/722656/

Fix

Related Identifiers

CVE-2026-64050

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-64050 · Security Note
• https://git.kernel.org/stable/c/c0c70a11365cba7fba25a77463582bcec0f7846e · Note
• https://git.kernel.org/stable/c/95048a12f48c627bc2ccc4d84f87640630ba2bdb · Note
• https://git.kernel.org/stable/c/ff58e5ef1b46ce614af048d2d04986df05ffab90 · Note