CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CVE-2026-64039

highCVSS 7.7covered by 19 sourcesfirst seen 2026-07-19
In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code internally aligns data segment to 16 bytes. This works fine for DPU code (where most of the regions are aligned), but fails for snapshotting of the DSI data (because DSI data region is shifted by 4 bytes). Fix the code by removing length alignment and by accurately printing last registers in the region. While reworking the code also fix the 16x memory overallocation in msm_disp_state_dump_regs(). Patchwork: https://patchwork.freedesktop.org/patch/725449/

CSIRTS triage

What
Multiple kernel flaws including NTFS file system out-of-bounds read, AMD processor floating point unit data exposure, and AMD Zen 2 operation cache isolation failure.
Who is affected
Systems running affected Linux kernel versions; local attackers on systems with NTFS mounted or AMD processors.
Urgency
Moderate to high — local attackers can gain privilege escalation and information disclosure; apply patches promptly.
Action
Apply kernel security updates provided by distribution maintainer.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-64039

Get an email if CVE-2026-64039 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Advisory coverage (19)

External references

NVD record for CVE-2026-64039

CVE.org record

Embed the live status

CVE-2026-64039 live status badge — this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-64039 status](https://www.csirts.com/badge/CVE-2026-64039)](https://www.csirts.com/cve/CVE-2026-64039)