7.8

CVE-2026-64050

drm/msm/dpu: don't mix devm and drmm functions

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dpu: don't mix devm and drmm functions

Mixing devm and drmm functions will result in a use-after-free on msm
driver teardown if userspace keeps a reference on the drm device:
The WB connector data will be destroyed because of the use of
devm_kzalloc()), while the usersoace still can try interacting with the
WB connector (which uses drmm_ functions).

Change dpu_writeback_init() to use drmm_.

Patchwork: https://patchwork.freedesktop.org/patch/722656/
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 0b37ac63fc9db7779168ad18d7e6e8ab9df6a40b
Version < ff58e5ef1b46ce614af048d2d04986df05ffab90
Status affected
Version 0b37ac63fc9db7779168ad18d7e6e8ab9df6a40b
Version < 95048a12f48c627bc2ccc4d84f87640630ba2bdb
Status affected
Version 0b37ac63fc9db7779168ad18d7e6e8ab9df6a40b
Version < c0c70a11365cba7fba25a77463582bcec0f7846e
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 6.18
Status affected
Version 0
Version < 6.18
Status unaffected
Version <= 6.18.*
Version 6.18.34
Status unaffected
Version <= 7.0.*
Version 7.0.11
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.025
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ff58e5ef1b46ce614af048d2d04986df05ffab90
https://git.kernel.org/stable/c/95048a12f48c627bc2ccc4d84f87640630ba2bdb
https://git.kernel.org/stable/c/c0c70a11365cba7fba25a77463582bcec0f7846e