CVE-2026-46211

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the msm ioctl gem info get metadata() function where it unconditionally returns 0, ignoring error codes stored in ret. This occurs when the user buffer is too small or copy to user() fails, misleading userspace into believing the operation succeeded. Furthermore, the function fails to check if kmemdup() returns NULL during allocation failure, which leads to a NULL pointer dereference—a condition where the system attempts to read or write to a memory address that is null—during the subsequent copy to user() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.