CVE-2026-64231
- Source
- https://cve.org/CVERecord?id=CVE-2026-64231
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64231.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64231
- Downstream
- Published
- 2026-07-24T15:23:13.175Z
- Modified
- 2026-07-27T04:03:20.674011948Z
- Summary
- drm/msm/dsi: don't dump registers past the mapped region
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dsi: don't dump registers past the mapped region
On DSI 6G platforms the IO address space is internally adjusted by iooffset. Later this adjusted address might be used for memory dumping. However the size that is used for memory dumping isn't adjusted to account for the iooffset, leading to the potential access to the unmapped region. Lower ctrlsize by the iooffset value to prevent access past the mapped area.
msmdispsnapshotaddblock+0x1d4/0x3c8 [msm] (P) msmdsihostsnapshot+0x4c/0x78 [msm] msmdsisnapshot+0x28/0x50 [msm] msmdispsnapshotcapturestate+0x74/0x140 [msm] msmdispsnapshotstatesync+0x60/0x90 [msm] msmdispsnapshotwork+0x30/0x90 [msm] kthreadworker_fn+0xdc/0x460 kthread+0x120/0x140
Patchwork: https://patchwork.freedesktop.org/patch/721747/
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64231.json" }- References
-
- https://git.kernel.org/stable/c/567b5e976e2e15280d78c9ef2add1954a0bbb5b1
- https://git.kernel.org/stable/c/5b49a46baa853b26dbefa65c6c75dd9ff69f63d4
- https://git.kernel.org/stable/c/5e2c196c3430fb94225c4102b1028d0146544761
- https://git.kernel.org/stable/c/9f8274749d9010a1a72f97e547b7eb9ebb82345b
- https://git.kernel.org/stable/c/a184aec790135938b0fadb415e55accd1f8685a0
- https://git.kernel.org/stable/c/ab871d5882953e5574ae2bc47bec88c2e3d22663
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64231.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64231
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedbac2c6a62ed91ba4f6c7c14a6a40b7c696b35645Fixed5e2c196c3430fb94225c4102b1028d0146544761Fixed567b5e976e2e15280d78c9ef2add1954a0bbb5b1Fixed9f8274749d9010a1a72f97e547b7eb9ebb82345bFixeda184aec790135938b0fadb415e55accd1f8685a0Fixedab871d5882953e5574ae2bc47bec88c2e3d22663Fixed5b49a46baa853b26dbefa65c6c75dd9ff69f63d4