Riskcovery

CVE-2026-64050

drm/msm/dpu: don't mix devm and drmm functions

State
Published
Severity
7.8 High
Published
Jul 19, 2026
Updated
Aug 5, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dpu: don't mix devm and drmm functions

Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed because of the use of devm_kzalloc()), while the usersoace still can try interacting with the WB connector (which uses drmm_ functions).

Change dpu_writeback_init() to use drmm_.

Patchwork: https://patchwork.freedesktop.org/patch/722656/

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0b37ac63fc9db7779168ad18d7e6e8ab9df6a40b to before ff58e5ef1b46ce614af048d2d04986df05ffab90Affected
  • 0b37ac63fc9db7779168ad18d7e6e8ab9df6a40b to before 95048a12f48c627bc2ccc4d84f87640630ba2bdbAffected
  • 0b37ac63fc9db7779168ad18d7e6e8ab9df6a40b to before c0c70a11365cba7fba25a77463582bcec0f7846eAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.