CVE-2026-93060 PUBLISHED

drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()

Assigner: Linux
Reserved: 17.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()

The a6xx_destroy() function frees "a6xx_gpu" and so "adreno_gpu" points to freed memory. Preserve the error code before freeing the memory to avoid a use after free.

Patchwork: https://patchwork.freedesktop.org/patch/732275/

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from d158886cba08688f2d8d0dbb7025a4440e6a8ffd to 105aaff286a153bfde3c1f5be534e6ded1f64342 (excl.)
  • affected from d158886cba08688f2d8d0dbb7025a4440e6a8ffd to b8a9c9c5787bed1243e5364c89ca66c26b4e4d83 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.2 is affected
  • unaffected from 0 to 7.2 (excl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References