CVE-2026-63910

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the dma buf fd() tracepoint. This occurs because a thread sharing the file descriptor table can call close() after FD ADD() returns but before DMA BUF TRACE() executes. If the close operation drops the last reference, fput() frees the dma buf, leading to a slab-use-after-free when the tracepoint attempts to dereference dmabuf to access dmabuf->name lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.