CVE-2026-93060: drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xx_gpu_init() The a6xx_destroy() function frees "a6xx_gpu" and so "adreno_gpu" points to freed memory. Preserve the error code before freeing the memory to avoid a use after free. Patchwork: https://patchwork.freedesktop.org/patch/732275/

Affected products

Linux kernel: 7.2 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/105aaff286a153bfde3c1f5be534e6ded1f64342
https://git.kernel.org/stable/c/b8a9c9c5787bed1243e5364c89ca66c26b4e4d83

Get alerted when CVE-2026-93060 or the next vulnerability affects your stack