CVE-2026-68245

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-68245

Key Details

CVE	CVE-2026-68245
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()

The vm pointer returned from amdgpu_vm_get_vm_from_pasid() is only

valid while the lock is still being held. Once xa_unlock_irqrestore is

called and returned, the pointer is no longer under lock and is subject

to modification. Since, the caller still dereferences vm->task_info in

amdgpu_vm_get_task_info_vm() after the lock is removed, this causes a

use after unlock problem.

Remove the lifetime issue present in amdgpu_vm_get_task_info_pasid()

through removing the amdgpu_vm_get_vm_from_pasid() function from

amdgpu_vm.c and making the relevant code inline to hold the lock while

it is still in use.

(cherry picked from commit 9d01579f3f868b333acc901815972685989092c7) (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-68245
CVE	https://www.cve.org/CVERecord?id=CVE-2026-68245

Source

Reference

NVD

CVE