CVE-2026-43236

kernel: drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's drm/atmel-hlcdc component. An issue in the atmel_hlcdc_plane_atomic_duplicate_state() callback, which incorrectly duplicates the drm_plane_state, can lead to a use-after-free vulnerability. This can be triggered when a device node is closed and re-opened while another Direct Rendering Manager (DRM) client is still active, potentially causing system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference