Description
In the Linux kernel, the following vulnerability has been resolved:

drm/msm/snapshot: fix dumping of the unaligned regions

The snapshotting code internally aligns data segment to 16 bytes. This
works fine for DPU code (where most of the regions are aligned), but
fails for snapshotting of the DSI data (because DSI data region is
shifted by 4 bytes). Fix the code by removing length alignment and by
accurately printing last registers in the region. While reworking the
code also fix the 16x memory overallocation in
msm_disp_state_dump_regs().

Patchwork: https://patchwork.freedesktop.org/patch/725449/
Published: 2026-07-19
Score: 7.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Linux kernel’s MSM DRM snapshot code previously attempted to align data segments to 16‑byte boundaries. When handling DSI data that is shifted by 4 bytes, this alignment caused excessive memory allocations and the dumping of incorrect register values. The vulnerability can result in a denial of service by allocating more memory than intended and potentially destabilizing the kernel during snapshot operations. The weakness corresponds to CWE‑805. No remote exploitation path is described; the flaw is triggered by code that initiates a snapshot operation with kernel‑level privileges.

Affected Systems

All Linux kernel builds that include the MSM DRM snapshot functionality are affected. No specific version numbers are enumerated, so any kernel containing the buggy snapshot code should be considered vulnerable.

Risk and Exploitability

With a CVSS score of 7.7 the vulnerability is of high severity, but an EPSS score of less than 1% indicates a low probability of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires privileged kernel access—typically local privileged users or applications that invoke a snapshot operation. The risk is therefore moderate, yet the potential impact warrants immediate patching.

Generated by OpenCVE AI on August 4, 2026 at 06:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a revision that contains the MSM snapshot memory‑allocation fix (e.g., the commit identified by the authors’ patch).
  • If the snapshot feature is not required, disable it in the driver configuration or via kernel module parameters.
  • Monitor memory usage of the DRM/MSM driver; if abnormal spikes are observed, consider restarting the driver or rebooting the system.

Generated by OpenCVE AI on August 4, 2026 at 06:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8575-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8576-1 Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu USN Ubuntu USN USN-8593-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8575-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8576-2 Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu USN Ubuntu USN USN-8575-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8603-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-8610-1 Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-8618-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8620-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8620-2 Linux kernel (Azure FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8620-3 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-8620-4 Linux kernel (Intel IoTG) vulnerabilities
History

Sun, 26 Jul 2026 08:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Tue, 21 Jul 2026 22:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Tue, 21 Jul 2026 12:15:00 +0000


Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'}


Sun, 19 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code internally aligns data segment to 16 bytes. This works fine for DPU code (where most of the regions are aligned), but fails for snapshotting of the DSI data (because DSI data region is shifted by 4 bytes). Fix the code by removing length alignment and by accurately printing last registers in the region. While reworking the code also fix the 16x memory overallocation in msm_disp_state_dump_regs(). Patchwork: https://patchwork.freedesktop.org/patch/725449/
Title drm/msm/snapshot: fix dumping of the unaligned regions
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-05T12:38:32.825Z

Reserved: 2026-07-19T07:54:57.028Z

Link: CVE-2026-64039

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Low

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-64039 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T06:15:04Z

Weaknesses
  • CWE-805

    Buffer Access with Incorrect Length Value