Linux Kernel Vulnerability in DPLL Device Change Notifications

CVE-2026-63977

What is CVE-2026-63977?

This vulnerability in the Linux kernel involves DPLL device change notifications, where an outdated method was previously used for handling device change notifications. The introduction of a new function, __dpll_device_change_ntf(), allows for direct handling of notifications without needing to work around a locking mechanism, thereby minimizing potential race conditions. By removing the old change_work infrastructure, the risk of dereferencing a freed or NULL pointer during device teardown is mitigated, enhancing overall system stability.

References