CVE-2026-64231 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internally adjusted by io_offset. Later this adjusted address might be used for memory dumping. However the size that is used for memory dumping isn't adjusted to account for the io_offset, leading to the potential access to the unmapped region. Lower ctrl_size by the io_offset value to prevent access past the mapped area. msm_disp_snapshot_add_block+0x1d4/0x3c8 [msm] (P) msm_dsi_host_snapshot+0x4c/0x78 [msm] msm_dsi_snapshot+0x28/0x50 [msm] msm_disp_snapshot_capture_state+0x74/0x140 [msm] msm_disp_snapshot_state_sync+0x60/0x90 [msm] _msm_disp_snapshot_work+0x30/0x90 [msm] kthread_worker_fn+0xdc/0x460 kthread+0x120/0x140 Patchwork: https://patchwork.freedesktop.org/patch/721747/
A vulnerability in the Linux kernel's handling of register dumping on DSI 6G platforms can lead to unauthorized access to unmapped memory regions. This issue arises because the size of the memory dumping process does not account for internal adjustments made by the IO offset, potentially allowing access beyond the allocated memory. The vulnerability affects the Linux kernel's stable group, specifically in the DRM subsystem for the MSM (Mobile Station Modem) graphics driver.
The vulnerability has been addressed by modifying the 'msm_dsi_host_init' function to reduce the control size by the IO offset value, preventing access beyond the mapped area. Users should upgrade to the latest version of the Linux kernel stable tree where this fix has been applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/567b5e976e2e15280d78c9ef2add1954a0bbb5b1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5b49a46baa853b26dbefa65c6c75dd9ff69f63d4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5e2c196c3430fb94225c4102b1028d0146544761 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9f8274749d9010a1a72f97e547b7eb9ebb82345b | kernel.org | Patch |
| https://git.kernel.org/stable/c/a184aec790135938b0fadb415e55accd1f8685a0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ab871d5882953e5574ae2bc47bec88c2e3d22663 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.14, < 6.1.175 >= 6.2, < 6.6.142 >= 6.7, < 6.12.92 >= 6.13, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 12, 2026 | Initial Analysis | [email protected] |
| Jul 24, 2026 | New CVE Received | kernel.org |