CVE-2026-64215: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/a6xx: Check kzalloc return in a8xxhfisendperftable
Check the return value of kzalloc() to prevent a NULL pointer dereference on allocation failure.
Patchwork: https://patchwork.freedesktop.org/patch/721342/
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In drm/msm/a6xx, in function a8xx_hfi_send_perf_table, add a NULL check for the kzalloc() return value and avoid dereferencing when kzalloc() fails. This corresponds to the resolved issue 'dereference on allocation failure' (Patchwork: patch/721342).
Linux kernel kzalloc() NULL-check for allocation failure = Check the return value of kzalloc() before dereferencing the allocated pointer (e.g., in drm/msm/a6xx a8xx_hfi_send_perf_table)
Event History
Frequently Asked Questions
What conditions are required to trigger this issue?
An attacker or local user needs local access and low privileges. Exploitation depends on causing a memory allocation failure in the a8xx_hfi_send_perf_table path, which previously could lead to a NULL pointer dereference.
What is the expected impact if the issue is triggered?
The reported impact is denial of service through a NULL pointer dereference, with availability rated high. The CVSS vector indicates no reported confidentiality or integrity impact.
How can I determine whether a system has the fix?
Check whether the kernel includes either referenced stable commit: 17c993bf44a54afd1fde184ba7f9c287dfc2632e or b5c7a7f452b885bfbe102bd3a057a5f496802f8b. The fix adds a return-value check for kzalloc() in a8xx_hfi_send_perf_table.