Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64098

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtio_gpu_cursor_plane_update() and virtio_gpu_resource_flush() lock the framebuffer BO's dma_resv via virtio_gpu_array_lock_resv() and ignore its return value. The function can fail with -EINTR from dma_resv_lock_interruptible() (signal during lock wait) or with -ENOMEM from dma_resv_reserve_fences() (fence slot allocation), leaving the resv lock not held. The queue
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:effcb8db8996605e786e93286a64c3a87051ee18634f3c4eb25e9ec588195e3a
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/virtio/virtgpu_drv.h","drivers/gpu/drm/virtio/virtgpu_gem.c","drivers/gpu/drm/virtio/virtgpu_plane.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c86077d512ee980cc91322211d35dbcd3175f64c","status":"affected","version":"5cfd31c5b3a321aed0c9621b7b45efa2942056f8","versionType":"git"},{"lessThan":"21ab64c77a30d56efc506c8fa2ad8959f8ce3d36","status":"affected","version":"5cfd31c5b3a321aed0c9621b7b45efa2942056f8","versionType":"git"},{"lessThan":"79…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/virtio/virtgpu_drv.h","drivers/gpu/drm/virtio/virtgpu_gem.c","drivers/gpu/drm/virtio/virtgpu_plane.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.7"},{"lessThan":"5.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrE…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/virtio/virtgpu_drv.h","drivers/gpu/drm/virtio/virtgpu_gem.c","drivers/gpu/drm/virtio/virtgpu_plane.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c86077d512ee980cc91322211d35dbcd3175f64c","status":"affected","version":"5cfd31c5b3a321aed0c9621b7b45efa2942056f8","versionType":"git"},{"lessThan":"21ab64c77a30d56efc506c8fa2ad8959f8ce3d36","status":"affected","version":"5cfd31c5b3a321aed0c9621b7b45efa2942056f8","versionType":"git"},{"lessThan":"79…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/virtio/virtgpu_drv.h","drivers/gpu/drm/virtio/virtgpu_gem.c","drivers/gpu/drm/virtio/virtgpu_plane.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.7"},{"lessThan":"5.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrE…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/metrics/0/cvssV3_1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/21ab64c77a30d56efc506c8fa2ad8959f8ce3d36"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/7930eee22cd3df61e85be8aa512032ab303b7167"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/8fadd01cf461fee5bb11506621339c548447e5c7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/9af1b6e175c82daf4b423da339a722d8e67a735a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/a2359a411b15f495d12cfda6a7db6855ebb7f90f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/c86077d512ee980cc91322211d35dbcd3175f64c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d2442db40d8905c9af533de5beca11440250acdee1922af7636957a86df5a524 · sha256:85c5dc33fb2c34c8… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer