CVE-2026-43236

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel within the drm/atmel-hlcdc component. The atmel hlcdc plane atomic duplicate state() callback copies the atmel hlcdc plane state structure without properly duplicating the drm plane state. Consequently, the state->commit variable remains set to the old state commit, which can lead to a use-after-free during the subsequent drm atomic commit() call. This has been observed when closing and re-opening the device node while another DRM client, such as fbdev, remains attached.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.