CVE-2026-68107
Received Received - Intake

AMDGPU VCN4 IB Parameter Length TOCTOU Vulnerability

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. (cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68107
EUVD
EUVD-2026-55488

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a potential time-of-check to time-of-use (TOCTOU) issue in the AMD GPU driver component VCN4. The problem occurs when the kernel rereads the IB (indirect buffer) parameter length from the IB instead of reusing the value already retrieved by a function. If the IB contents change between these reads, it could lead to inconsistent or incorrect behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver (amdgpu) and relates to a potential TOCTOU issue in the VCN4 encoder. Detection requires checking kernel logs for related errors or kernel crashes involving amdgpu or VCN4 components. Commands like dmesg | grep amdgpu or journalctl -k | grep amdgpu may help identify issues.

Impact Analysis

This vulnerability could allow an attacker with local access to manipulate the IB contents between reads, potentially causing system instability, crashes, or unexpected behavior in applications using the AMD GPU driver. It may also lead to privilege escalation if exploited.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this issue. Monitor kernel updates from your distribution and apply them promptly. If using a custom kernel, apply the patch from the referenced commit dbb02b4755f8c1f3773263f2d779872c1c0c073a.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68107. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart