SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-64049

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's Adreno graphics driver, specifically in the handling of user space queries related to Unified Bandwidth Compression (UBWC) parameters for the a2xx-a4xx GPU generations. An attacker could exploit this flaw to trigger a NULL pointer dereference, potentially leading to a crash of the affected system. Organizations utilizing Linux systems with these specific Adreno GPU models should prioritize applying the patch to mitigate the risk of service disruption.

CVE
CVE-2026-64049
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fetching UBWC params (because those generations didn't support UBWC anyway), however it's still possible to query UBWC-related params from the userspace, triggering possible NULL pointer dereference. Check for UBWC config in adreno_get_param() and return sane defaults if there is none. Patchwork: https://patchwork.freedesktop.org/patch/717778/