SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-64039

HIGH · CVSS 7.7 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's snapshotting functionality within the Direct Rendering Manager (DRM) for MSM (Mobile Station Modem) graphics, specifically related to improper handling of unaligned data regions. This flaw could lead to incorrect memory dumps, potentially exposing sensitive information or causing system instability. Organizations using Linux systems with MSM graphics should prioritize applying the patch to mitigate the risk associated with this high-severity vulnerability.

CVE
CVE-2026-64039
Severity
HIGH
CVSS
7.7
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code internally aligns data segment to 16 bytes. This works fine for DPU code (where most of the regions are aligned), but fails for snapshotting of the DSI data (because DSI data region is shifted by 4 bytes). Fix the code by removing length alignment and by accurately printing last registers in the region. While reworking the code also fix the 16x memory overallocation in msm_disp_state_dump_regs(). Patchwork: https://patchwork.freedesktop.org/patch/725449/