Use After Free Vulnerability in Linux Kernel by The Linux Foundation

CVE-2026-64008

What is CVE-2026-64008?

A vulnerability in the Linux kernel allows for a use-after-free condition due to improper handling of a GEM handle in the 'rocket_ioctl_create_bo()' function. The GEM handle is created before critical operations, and if any operation fails, the object is freed without removing the handle from the IDR. This results in a dangling handle that can subsequently lead to dereferencing of freed memory during operations such as PREP_BO and SUBMIT, potentially allowing an attacker to exploit this flaw.

References