SB2026040657 - Use-after-free in Linux kernel gpu drm driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026040657

SB2026040657 - Use-after-free in Linux kernel gpu drm driver

Published: April 6, 2026

Security Bulletin ID SB2026040657
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use-after-free (CVE-ID: CVE-2026-23471)

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free in framebuffers and property blobs in the drm subsystem when calling drm_dev_unplug during device unbind and file close handling. A local user can trigger device unbind operations and subsequent cleanup to cause a denial of service.

The issue was observed with freed pointer dereferences, warnings, and a general protection fault after compositor exit. Exploitation requires local access and interaction with the affected DRM device lifecycle.


Remediation

Install update from vendor's website.

References