In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node… (CVE-2026-64154)
A reference leak vulnerability in the Linux kernel's drm/msm/adreno driver was fixed in the a6xx_gpu_init() function. The issue occurred because early error returns bypassed a manual reference release call, causing a resource leak. The fix involved using a cleanup handler to ensure the reference is released properly when the variable goes out of scope. This vulnerability has a medium severity score and impacts system availability due to the potential for resource exhaustion.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's drm/msm/adreno component involves a reference leak in the a6xx_gpu_init() function. Specifically, the node obtained via of_parse_phandle() was not always released on early error returns, leading to a reference leak. The patch addresses this by employing the __free(device_node) cleanup handler to automatically release the reference when the variable goes out of scope, preventing the leak.
Potential Impact
The vulnerability does not affect confidentiality or integrity but impacts availability by causing a reference leak that could lead to resource exhaustion or system instability. There is no indication of known exploits in the wild.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel source code by adding a cleanup handler to properly release the reference. Users should apply the official kernel patch or update to a kernel version that includes this fix. Patch status is not explicitly confirmed in the input; therefore, check the vendor or kernel advisory for the current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node… (CVE-2026-64154)
Description
A reference leak vulnerability in the Linux kernel's drm/msm/adreno driver was fixed in the a6xx_gpu_init() function. The issue occurred because early error returns bypassed a manual reference release call, causing a resource leak. The fix involved using a cleanup handler to ensure the reference is released properly when the variable goes out of scope. This vulnerability has a medium severity score and impacts system availability due to the potential for resource exhaustion.
CVSS v3.1
Score 5.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's drm/msm/adreno component involves a reference leak in the a6xx_gpu_init() function. Specifically, the node obtained via of_parse_phandle() was not always released on early error returns, leading to a reference leak. The patch addresses this by employing the __free(device_node) cleanup handler to automatically release the reference when the variable goes out of scope, preventing the leak.
Potential Impact
The vulnerability does not affect confidentiality or integrity but impacts availability by causing a reference leak that could lead to resource exhaustion or system instability. There is no indication of known exploits in the wild.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel source code by adding a cleanup handler to properly release the reference. Users should apply the official kernel patch or update to a kernel version that includes this fix. Patch status is not explicitly confirmed in the input; therefore, check the vendor or kernel advisory for the current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-cf8p-8jpf-qj34
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64154"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a82a4a8d598912aef6
Added to database: 07/19/2026, 19:38:16 UTC
Last enriched: 08/17/2026, 16:39:35 UTC
Last updated: 09/01/2026, 10:52:10 UTC
Views: 65
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.