CVE-2026-64154General(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node is obtained via of_parse_phandle(). While there was a manual of_node_put() at the end of the common path, several early error returns would bypass this call, resulting in a reference leak. Fix this by using the __free(device_node) cleanup handler to release the reference when the variable goes out of scope. Patchwork: https://patchwork.freedesktop.org/patch/700661/

0.0/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • False Positive: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-20); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-20: 1Mentions · 2026-07-21: 1Technical Details · 2026-07-20: 1Technical Details · 2026-07-21: 107-2007-21
Signal classification2 categories
General
150.0%
False Positive
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-201
General1
2026-07-211
False Positive1
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-64154 Reference Leak in Linux Kernel drm/msm/adreno a6xx_gpu_init() https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64154

    Post summary

    The text flags a reference leak vulnerability (CVE‑2026‑64154) in the Linux Kernel's drm/msm/adreno a6xx_gpu_init() module, but offers no PoC, exploit, patch, or active exploitation details.

    00002123
    4.1K followersView on X
  • Windows Forum@windowsforum
    False Positive

    🐧 CVE-2026-64154 sounds scary, but it’s really an Adreno A6xx cleanup bug: a Device Tree reference gets left behind on an error path. No code execution—just Linux forgetting to take out the trash. https://windowsforum.com/threads/cve-2026-64154-fixes-qualcomm-adreno-a6xx-linux-reference-leak.439803/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #KernelSecurity #CveAnalysis #QualcommAdreno https://t.co/0q4AB8alRY

    Post summary

    The tweet debunks concerns over CVE‑2026‑64154, labeling it a non‑critical Device Tree cleanup issue with no code execution.

    0000049
    1.3K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel7.1--
OSlinuxlinux_kernel7.1--
OSlinuxlinux_kernel7.1--
OSlinuxlinux_kernel7.1--

Explore more