Linux Kernel Memory Management Vulnerability in DRM MSM A6XX

Vulnerability

A vulnerability has been identified in the Linux kernel's DRM MSM A6XX graphics driver, specifically related to memory management. The issue arises in the 'adreno_show_object()' function, which reallocates the pointer it receives on the first call when the data is ASCII85 encoded, using 'kvmalloc' and 'kvfree()'. This behavior requires that the data passed to the function be allocated with 'kvmalloc', prohibiting the use of the 'state_kcalloc()' helper. The vulnerability was introduced by a previous commit that replaced 'kcalloc()' with 'kvzalloc()', without properly addressing the memory deallocation, leading to a memory leak. The issue has been acknowledged and a patch has been applied to restore the correct memory management practices.

Impact

The vulnerability could lead to improper memory handling, causing memory leaks or potentially allowing for memory corruption.

Added: Dec 30, 2025, 4:59 PM
Updated: Dec 30, 2025, 4:59 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.3
remediation
7.7
relevance
1.6
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.