CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/adreno: Fix a reference leak in a6xxgpuinit()
In a6xxgpuinit(), node is obtained via ofparsephandle(). While there was a manual ofnodeput() at the end of the common path, several early error returns would bypass this call, resulting in a reference leak. Fix this by using the free(devicenode) cleanup handler to release the reference when the variable goes out of scope.
Patchwork: https://patchwork.freedesktop.org/patch/700661/
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 700661
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64154?
CVE-2026-64154 has a severity rating of 9, indicating a critical vulnerability that requires immediate attention.
How does CVE-2026-64154 affect the Linux kernel?
CVE-2026-64154 affects the Linux kernel by introducing a reference leak in the a6xx_gpu_init() function, which could potentially lead to resource depletion.
How do I fix CVE-2026-64154?
To fix CVE-2026-64154, you should apply the latest security patches provided for the Linux kernel that address this vulnerability.
What systems are impacted by CVE-2026-64154?
CVE-2026-64154 impacts systems running the affected versions of the Linux kernel that utilize the DRM/ MSM/ Adreno graphics driver.
Is there a workaround for CVE-2026-64154 before applying a patch?
Currently, there are no known workarounds for CVE-2026-64154 other than updating to the patched version of the Linux kernel.