CVE-2026-68427

Received Received - Intake

Use-After-Free in Linux Kernel Host1x GPU Driver

Publication date: 2026-08-10

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __host1x_bo_unpin() drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cache local variable instead.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-10-19

Generated

2026-11-08

AI Q&A

2026-08-10

EPSS Evaluated

2026-11-07

NVD

CVE-2026-68427

EUVD

EUVD-2026-55613

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*
nvidia	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in the Linux kernel's GPU host1x driver. It occurs when host1x_bo_clear_cached_mappings tries to access a freed memory mapping after __host1x_bo_unpin has already released it. The fix ensures the cache variable is used instead of the freed mapping.

Detection Guidance

This vulnerability is specific to the Linux kernel's GPU host1x driver and does not have network-based detection methods. Detection requires checking the kernel version and examining kernel logs for use-after-free errors in host1x_bo_clear_cached_mappings.

Impact Analysis

This could cause system crashes or instability if exploited. It may allow local attackers to execute arbitrary code or escalate privileges on affected systems running vulnerable Linux kernel versions.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a Linux kernel use-after-free issue in GPU memory management. Compliance implications would depend on system-specific usage and data handling, not the vulnerability itself.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-68427. Monitor kernel logs for related errors and ensure GPU drivers are functioning correctly after the update.

Hi! I’m here to help you understand CVE-2026-68427. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...