CVE-2026-64050
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
30/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/msm/dpu: don&#39;t mix devm and drmm functions<br />
<br />
Mixing devm and drmm functions will result in a use-after-free on msm<br />
driver teardown if userspace keeps a reference on the drm device:<br />
The WB connector data will be destroyed because of the use of<br />
devm_kzalloc()), while the usersoace still can try interacting with the<br />
WB connector (which uses drmm_ functions).<br />
<br />
Change dpu_writeback_init() to use drmm_.<br />
<br />
Patchwork: https://patchwork.freedesktop.org/patch/722656/
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA