PT-2026-61366 · Linux+1 · Linux Kernel+1

CVE-2026-64049

·

Published

2026-05-13

·

Updated

2026-09-07

CVSS v2.0

6.8

Medium

VectorAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer dereference can be triggered in the adreno get param() function when userspace queries UBWC-related parameters on a2xx-a4xx Adreno drivers. This occurs because these hardware generations do not support UBWC (Universal Memory Compression), and the driver fails to verify the UBWC configuration before attempting to fetch the parameters.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-14396
CVE-2026-64049
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu