PT-2026-64346 · Linux · Linux

CVE-2026-64231 · Published 2026-07-24 · Updated 2026-07-24

NVD

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dsi: don't dump registers past the mapped region

On DSI 6G platforms the IO address space is internally adjusted by io offset. Later this adjusted address might be used for memory dumping. However the size that is used for memory dumping isn't adjusted to account for the io offset, leading to the potential access to the unmapped region. Lower ctrl size by the io offset value to prevent access past the mapped area.

msm disp snapshot add block+0x1d4/0x3c8 [msm] (P) msm dsi host snapshot+0x4c/0x78 [msm] msm dsi snapshot+0x28/0x50 [msm] msm disp snapshot capture state+0x74/0x140 [msm] msm disp snapshot state sync+0x60/0x90 [msm] msm disp snapshot work+0x30/0x90 [msm] kthread worker fn+0xdc/0x460 kthread+0x120/0x140

Patchwork: https://patchwork.freedesktop.org/patch/721747/

Related Identifiers

CVE-2026-64231

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-64231 · Security Note
• https://git.kernel.org/stable/c/9f8274749d9010a1a72f97e547b7eb9ebb82345b · Note
• https://git.kernel.org/stable/c/5b49a46baa853b26dbefa65c6c75dd9ff69f63d4 · Note
• https://git.kernel.org/stable/c/567b5e976e2e15280d78c9ef2add1954a0bbb5b1 · Note
• https://git.kernel.org/stable/c/5e2c196c3430fb94225c4102b1028d0146544761 · Note
• https://git.kernel.org/stable/c/ab871d5882953e5574ae2bc47bec88c2e3d22663 · Note
• https://git.kernel.org/stable/c/a184aec790135938b0fadb415e55accd1f8685a0 · Note