In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code… (CVE-2026-64039)
In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code internally aligns data segment to 16 bytes. This works fine for DPU code (where most of the regions are aligned), but fails for snapshotting of the DSI data (because DSI data region is shifted by 4 bytes). Fix the code by removing length alignment and by accurately printing last registers in the region. While reworking the code also fix the 16x memory overallocation in msm_disp_state_dump_regs(). Patchwork: https://patchwork.freedesktop.org/patch/725449/
AI Analysis
Technical Summary
The Linux kernel contained a vulnerability in the drm/msm snapshot code where data segments were internally aligned to 16 bytes. This alignment worked for most regions but failed for the DSI data region, which is shifted by 4 bytes, causing incorrect dumping of unaligned regions. The patch removes the length alignment and accurately prints the last registers in the region. Additionally, the patch fixes a 16x memory overallocation in msm_disp_state_dump_regs(). This vulnerability has been resolved as per the referenced patchwork submission.
Potential Impact
The vulnerability caused incorrect handling of unaligned data regions during snapshot dumping in the Linux kernel's drm/msm driver. While the description does not specify direct exploitation consequences, such misalignment could lead to inaccurate debugging information or potential memory corruption during snapshot operations. No known exploits are reported in the wild.
Mitigation Recommendations
An official fix has been applied to the Linux kernel drm/msm snapshot code that removes the problematic length alignment and corrects memory overallocation. Users should apply the updated kernel patches as provided by the Linux kernel maintainers. Patch status is confirmed resolved by the referenced patchwork submission.
In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code… (CVE-2026-64039)
Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code internally aligns data segment to 16 bytes. This works fine for DPU code (where most of the regions are aligned), but fails for snapshotting of the DSI data (because DSI data region is shifted by 4 bytes). Fix the code by removing length alignment and by accurately printing last registers in the region. While reworking the code also fix the 16x memory overallocation in msm_disp_state_dump_regs(). Patchwork: https://patchwork.freedesktop.org/patch/725449/
CVSS v3.1
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel contained a vulnerability in the drm/msm snapshot code where data segments were internally aligned to 16 bytes. This alignment worked for most regions but failed for the DSI data region, which is shifted by 4 bytes, causing incorrect dumping of unaligned regions. The patch removes the length alignment and accurately prints the last registers in the region. Additionally, the patch fixes a 16x memory overallocation in msm_disp_state_dump_regs(). This vulnerability has been resolved as per the referenced patchwork submission.
Potential Impact
The vulnerability caused incorrect handling of unaligned data regions during snapshot dumping in the Linux kernel's drm/msm driver. While the description does not specify direct exploitation consequences, such misalignment could lead to inaccurate debugging information or potential memory corruption during snapshot operations. No known exploits are reported in the wild.
Mitigation Recommendations
An official fix has been applied to the Linux kernel drm/msm snapshot code that removes the problematic length alignment and corrects memory overallocation. Users should apply the updated kernel patches as provided by the Linux kernel maintainers. Patch status is confirmed resolved by the referenced patchwork submission.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-3hrp-9734-8xmp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64039"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a92a4a8d598912cefe
Added to database: 07/19/2026, 19:38:17 UTC
Last enriched: 07/19/2026, 19:56:45 UTC
Last updated: 07/20/2026, 19:41:22 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.