CVE-2026-64099

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the drm/v3d component. In the CPU job ioctl error path, the system calls kvfree() on timestamp and performance query arrays after v3d job cleanup() has already dropped the last reference and freed the cpu job object. Additionally, a NULL dereference occurs during the early v3d job init() failure path because v3d job deallocate() zeroes the local pointer. The error path also causes a memory leak of one syncobj reference per query because it fails to call drm syncobj put() for per-query syncobjs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.