CVE-2026-64050

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the drm/msm/dpu component of the Linux kernel. This occurs when devm and drmm functions are mixed during the msm driver teardown process. Specifically, if userspace maintains a reference to the drm device, the WB connector data is destroyed due to the use of devm kzalloc(), while userspace may still attempt to interact with the WB connector which relies on drmm functions.

Recommendations Update the dpu writeback init() function to use drmm functions instead of devm functions.