SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64154

MEDIUM · CVSS 5.5 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A reference leak vulnerability exists in the Linux kernel's a6xx_gpu_init() function, where certain early error returns bypass the necessary cleanup of device node references. This can lead to memory management issues, potentially affecting system stability and performance. Linux system administrators and developers working with the affected kernel versions should prioritize applying the patch to mitigate the risk of resource exhaustion.

CVE
CVE-2026-64154
Severity
MEDIUM
CVSS
5.5
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node is obtained via of_parse_phandle(). While there was a manual of_node_put() at the end of the common path, several early error returns would bypass this call, resulting in a reference leak. Fix this by using the __free(device_node) cleanup handler to release the reference when the variable goes out of scope. Patchwork: https://patchwork.freedesktop.org/patch/700661/

Related CVEs

Other vulnerabilities affecting the same vendor(s)