In 2026, a use‑after‑free flaw was handled in the Linux kernel. The buffer object can be freed during an error path and later retried, accessing a freed object and causing potential kernel memory corruption. This vulnerability is a classic CWE‑416 error, but the description does not specify privilege escalation or arbitrary code execution.

Linux kernels that do not contain commit 4796694, the change that allocates and initializes the buffer before attachment, remain vulnerable. Versions prior to the inclusion of this commit in major distributions are at risk; any custom kernels lacking the fix should be examined.

Classified as a use‑after‑free (CWE‑416) and a data‑synchronization error (CWE‑825), the vulnerability carries a CVSS score of 7.8. The EPSS score is below 1% and the vulnerability is not listed in CISA’s KEV catalog. While no public exploitation is documented, an attacker would need to trigger the specific error condition in the DRM subsystem, which typically requires a driver or root-level interaction.