Use-After-Free Vulnerability in Rockchip DRM Driver

CVE-2026-74422

What is CVE-2026-74422?

A vulnerability exists in the Rockchip DRM driver within the Linux kernel, where improper memory management during the encoder cleanup process could lead to use-after-free conditions. The driver attempts to access an encoder structure that may no longer be valid after resources are released. This problem arises because the internal structure is allocated with a device-managed approach instead of a memory management approach specifically meant for DRM. As a result, when the encoder is unbound, the system may inadvertently use a pointer to memory that has already been freed, potentially leading to crashes or exploitation opportunities.

References