CVE-2026-64231
Received Received - Intake

Buffer Overflow in Linux Kernel MSM DSI Driver

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internally adjusted by io_offset. Later this adjusted address might be used for memory dumping. However the size that is used for memory dumping isn't adjusted to account for the io_offset, leading to the potential access to the unmapped region. Lower ctrl_size by the io_offset value to prevent access past the mapped area. msm_disp_snapshot_add_block+0x1d4/0x3c8 [msm] (P) msm_dsi_host_snapshot+0x4c/0x78 [msm] msm_dsi_snapshot+0x28/0x50 [msm] msm_disp_snapshot_capture_state+0x74/0x140 [msm] msm_disp_snapshot_state_sync+0x60/0x90 [msm] _msm_disp_snapshot_work+0x30/0x90 [msm] kthread_worker_fn+0xdc/0x460 kthread+0x120/0x140 Patchwork: https://patchwork.freedesktop.org/patch/721747/

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-64231
EUVD
EUVD-2026-48639

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
freedesktop linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of memory addresses during register dumps on DSI 6G platforms. The issue occurs because the adjusted IO address space (io_offset) is not accounted for when determining the size for memory dumps, leading to potential access beyond the mapped memory region.

Detection Guidance

This vulnerability is specific to the Linux kernel's msm_dsi driver and does not have a direct network detection method. It can be detected by checking kernel logs for errors related to msm_dsi_host_snapshot or msm_disp_snapshot_add_block. Use commands like dmesg | grep msm_dsi or journalctl -k | grep msm_dsi to review kernel logs for suspicious activity.

Impact Analysis

This vulnerability could cause system instability or crashes by accessing unmapped memory regions. It may also lead to information disclosure if sensitive data is exposed during the improper memory dump process.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a memory access issue in the Linux kernel's display driver subsystem, which could lead to system instability or crashes but does not inherently impact data protection or privacy requirements.

Mitigation Strategies

Apply the kernel patch provided in the Patchwork link (https://patchwork.freedesktop.org/patch/721747/). Update your Linux kernel to a version that includes this fix. If immediate patching is not possible, monitor for crashes or memory access errors in the msm_dsi driver and restrict access to affected systems.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64231. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart