CVE-2026-93060
drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 7.2.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xx_gpu_init() The a6xx_destroy() function frees "a6xx_gpu" and so "adreno_gpu" points to freed memory. Preserve the error code before freeing the memory to avoid a use after free. Patchwork: https://patchwork.freedesktop.org/patch/732275/
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From d158886cba08688f2d8d0dbb7025a4440e6a8ffd · fixed in 105aaff286a153bfde3c1f5be534e6ded1f64342; From d158886cba08688f2d8d0dbb7025a4440e6a8ffd · fixed in b8a9c9c5787bed1243e5364c89ca66c26b4e4d83
- Linux Linux
7.2
- KernelLinux
From 7.2.0 · fixed in 7.2.6