CVE-2026-64231

A flaw was found in the Linux kernel's Qualcomm MSM display driver. This vulnerability allows a local user to trigger a Denial of Service (DoS) by causing an out-of-bounds memory read during display snapshot operations. When dumping device registers on certain display platforms, the driver does not properly adjust the memory dump size for the address offset, leading to access beyond the mapped memory area. This invalid memory access can result in a kernel crash.

This vulnerability is rated as Low severity because exploitation requires local system access on platforms running Qualcomm MSM display hardware, restricting the blast radius strictly to a kernel crash and denial of service. Standard Red Hat Enterprise Linux environments do not typically run on hardware utilizing Qualcomm display controllers, significantly limiting practical exposure. Furthermore, the issue only triggers during display snapshot diagnostic operations and cannot be leveraged for data manipulation or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.