Executive brief
A vulnerability was identified in the Linux kernel's graphics driver for Qualcomm Adreno GPUs. Under specific conditions where the system runs out of memory, the driver could crash the entire system instead of gracefully handling the error. This could lead to a denial of service, impacting system stability and availability.
Technical details
A vulnerability in the drm/msm/a6xx driver within the Linux kernel was caused by a missing return value check for kzalloc() in the a8xx_hfi_send_perf_table function. If a memory allocation fails, the 'tbl' pointer remains NULL, and subsequent attempts to write to tbl->type result in a NULL pointer dereference. This issue can be triggered during GPU initialization or performance state changes if the system is under extreme memory pressure. An attacker with local access could potentially exploit this to cause a kernel panic (Denial of Service). The issue has been patched in stable branches 6.19 and 7.0.11.
Affected products
- Linux Linux 6.19, 7.0.11
Timeline
- 2026-04-28: disclosed: Initial patch submitted by Chen Ni
- 2026-07-24: advisory: CVE-2026-64215 published by NVD
- 2026-06-01: patched: Patch committed to stable kernel tree