CVE-2026-64098

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/virtio component where the functions virtio gpu cursor plane update() and virtio gpu resource flush() fail to properly handle the return value of virtio gpu array lock resv(). This can lead to a state where the dma resv lock is not held due to -EINTR (signal during lock wait) or -ENOMEM (fence slot allocation) errors. Consequently, subsequent calls to dma resv add fence() occur without the required lock, which can cause race conditions when mutating the dma resv fence list, potentially leading to list corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.