CVE-2026-74421

A flaw was found in the Linux kernel's drm/rockchip: dw_dp driver. An issue in memory management, specifically a use-after-free vulnerability, occurs when an internal encoder structure is prematurely deallocated. This can happen when the DRM device reference is dropped, causing drmm_encoder_alloc_release() to access freed memory. A local attacker could potentially exploit this to cause a denial of service or achieve privilege escalation.

This vulnerability is evaluated as having a Moderate impact because exploitation requires local system access and specific Rockchip display hardware, restricting the blast radius to a localized denial of service. Furthermore, supported Red Hat Enterprise Linux kernels do not include the vulnerable code introduced in newer upstream versions, leaving standard enterprise environments unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.