CVE-2026-64050
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
30/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/msm/dpu: don&#39;t mix devm and drmm functions<br />
<br />
Mixing devm and drmm functions will result in a use-after-free on msm<br />
driver teardown if userspace keeps a reference on the drm device:<br />
The WB connector data will be destroyed because of the use of<br />
devm_kzalloc()), while the usersoace still can try interacting with the<br />
WB connector (which uses drmm_ functions).<br />
<br />
Change dpu_writeback_init() to use drmm_.<br />
<br />
Patchwork: https://patchwork.freedesktop.org/patch/722656/
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH