CVE-2026-64099
kernel: drm/v3d: Fix use-after-free of CPU job query arrays on error path
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · October 13, 2026
Description
A flaw was found in the Linux kernel's drm/v3d graphics driver. This vulnerability, a use-after-free error, occurs in the CPU job input/output control (ioctl) error path. When an error is encountered, the system attempts to access memory that has already been freed, which can lead to system instability, a denial of service, or potentially allow a local attacker to execute arbitrary code.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-825 · Expired Pointer Dereference