CVE-2026-64039CWE-131

CVE-2026-64039

High · published July 19, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/snapshot: fix dumping of the unaligned regions

The snapshotting code internally aligns data segment to 16 bytes. This

works fine for DPU code (where most of the regions are aligned), but

fails for snapshotting of the DSI data (because DSI data region is

shifted by 4 bytes). Fix the code by removing length alignment and by

accurately printing last registers in the region. While reworking the

code also fix the 16x memory overallocation in

msm_disp_state_dump_regs().

Patchwork: https://patchwork.freedesktop.org/patch/725449/

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00185 · 7.7th percentile
Weakness
CWE-131 · Incorrect Calculation of Buffer Size
Published
2026-07-19T20:17Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.14, < 5.15.2095.15.209
linux/linux_kernel≥ 5.16, < 6.1.1756.1.175
linux/linux_kernel≥ 6.2, < 6.6.1426.6.142
linux/linux_kernel≥ 6.7, < 6.12.926.12.92
linux/linux_kernel≥ 6.13, < 6.18.346.18.34
linux/linux_kernel≥ 6.19, < 7.0.117.0.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
EPSS history
Timeline
  • 19 JUL 15:39Z
    drm/msm/snapshot: fix dumping of the unaligned regions
    cvelistv5