CVE-2026-64154

CVE-2026-64154: vulnerability in Linux

drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.1%
exploitation probability
0.1%top 97% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node is obtained via of_parse_phandle(). While there was a manual of_node_put() at the end of the common path, several early error returns would bypass this call, resulting in a reference leak. Fix this by using the __free(device_node) cleanup handler to release the reference when the variable goes out of scope. Patchwork: https://patchwork.freedesktop.org/patch/700661/
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 98.1%KEVCVE-2026-46300HIGHnet: skbuff: preserve shared-frag marker during coalescingEPSS 15.7%KEVCVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 3.3%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEV
References
https://git.kernel.org/stable/c/2be24c945e76cd538ce5dd2e50f5d3e7d848c175https://git.kernel.org/stable/c/b76568c6721840a4ddb65e24e2849db0f8e83461https://git.kernel.org/stable/c/bd750e4043bbd9e2ef69de50b11bd6f98c366cc0https://git.kernel.org/stable/c/bdad77438cc2ba006b041eb02adccb0b9f8cffadhttps://git.kernel.org/stable/c/e64bca63647db1d5518198d6c5ca2dbcc66b182b