In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dpu: don't mix devm and drmm functions
Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed because of the use of devm_kzalloc()), while the usersoace still can try interacting with the WB connector (which uses drmm_ functions).
Change dpu_writeback_init() to use drmm_.
Patchwork: https://patchwork.freedesktop.org/patch/722656/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-azure-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-awsUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-raspi-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-ibmUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1010-ibm | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub