`63ac45d3bc` REGRESSION(310189@main): Occasional UI process crash under DisplayLink callbacks (SwipeProgressTracker can fail to deregister from DisplayLink)

severity low class UAF confidence 0.60 WebKit UIProcess/mac

Abrar Rahman Protyasha Thu May 21 18:21:04 2026 -0700 full: 63ac45d3bc31b8703a439422e2070ff5d7ec57c5 bug report ↗ view on GitHub ↗

Primitive: stale WebProcessPool/page use in DisplayLink callback
Triage note: Lifetime fix for a UI-process crash under DisplayLink callbacks (raw use -> WeakPtr).

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…

63ac45d3bc REGRESSION(310189@main): Occasional UI process crash under DisplayLink callbacks (SwipeProgressTracker can fail to deregister from DisplayLink)

Before / after

`63ac45d3bc` REGRESSION(310189@main): Occasional UI process crash under DisplayLink callbacks (SwipeProgressTracker can fail to deregister from DisplayLink)