Riskcovery

CVE-2026-64049

drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx

State
Published
Severity
Not scored
Published
Jul 19, 2026
Updated
Jul 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx

Before a5xx Adreno driver will not try fetching UBWC params (because those generations didn't support UBWC anyway), however it's still possible to query UBWC-related params from the userspace, triggering possible NULL pointer dereference. Check for UBWC config in adreno_get_param() and return sane defaults if there is none.

Patchwork: https://patchwork.freedesktop.org/patch/717778/

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a452510aad53f665eb422784ff525c4889aa246f to before eea43d5ed45089705bc5d70971c39076962d5951Affected
  • a452510aad53f665eb422784ff525c4889aa246f to before 22fc33d9b67694b24e0deb3f08c622464338cecbAffected
  • a452510aad53f665eb422784ff525c4889aa246f to before 2b4abf879360ea00a9e2b46d2d15dcdbc0687eedAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.