Linux Kernel Vulnerability in drm/msm/gem Affecting Error Handling

CVE-2026-46211

What is CVE-2026-46211?

A vulnerability exists in the Linux kernel's drm/msm/gem module where the function msm_ioctl_gem_info_get_metadata() fails to accurately report errors. It erroneously returns a success status (0) regardless of whether operations like copy_to_user() are successful, misleading userspace applications. Furthermore, a lack of error checking on the kmemdup() function can lead to a NULL pointer dereference, potentially causing crashes. The issue has been addressed by ensuring proper return codes are used and by adding necessary NULL checks.

References