Linux Kernel CVE-2026-64154

The vulnerability resides in the Linux kernel DRM (Direct Rendering Manager) subsystem, specifically the MSM driver for Qualcomm Adreno a6xx series GPUs. The function a6xx_gpu_init() calls of_parse_phandle(), a device tree helper that retrieves a firmware node reference and increments its reference count. This reference must be released explicitly via of_node_put() to prevent kernel object reference count leakage. Several early error return paths in the function bypassed the manually placed of_node_put() at the end of the common execution path, leaking the reference on each failed initialization attempt. The root cause is a classic resource-acquisition-without-guaranteed-cleanup pattern, functionally equivalent to CWE-772 (Missing Release of Resource after Effective Lifetime). The upstream fix replaces manual cleanup with the __free(device_node) scope-based cleanup handler, ensuring the node reference is always decremented when the variable goes out of scope regardless of which exit path is taken. CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* applies; the driver is loaded only on systems with Qualcomm Adreno a6xx hardware.