CVE-2026-68234
Received Received - Intake

Memory Leak in AMDGPU Linux Kernel Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved amdgpu_bo_create_reserved() only allocates a new BO when *bo_ptr (struct amdgpu_bo **bo_ptr as input parameter) is NULL, it simply skips creation when *bo_ptr is non-NULL. But it unconditionally reserves, pins, gart allocates and maps the BO afterwards. When the same non-NULL BO pointer is passed in again, for example firmware buffers that live in adev and are re-loaded on every resume / cp_resume / start under AMDGPU_FW_LOAD_DIRECT, amdgpu_bo_pin() just increases pin_count unconditionally, however the matching teardown only unpins once, so pin_count never drops to zero, so TTM is not able to move, swap or evict a BO, causing BO leaks. This commit fixes this issue by only pinning the bo once at creation, and repeated calls no longer take additional pin references. (cherry picked from commit 3ddc0ae76202c447b6aec61e907b852bc94671cf)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68234
EUVD
EUVD-2026-55335

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amd amdgpu *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory management issue in the AMD GPU driver. When a reserved buffer object (BO) is reused, the pin count increases indefinitely without proper cleanup, preventing the buffer from being moved, swapped, or evicted. This leads to a leak where the buffer remains pinned in memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and does not have network-based detection methods. Check kernel logs for amdgpu-related errors or warnings, particularly around BO pinning and memory management. Commands like dmesg | grep amdgpu or journalctl -k | grep amdgpu may help identify issues.

Impact Analysis

This vulnerability can cause system instability by exhausting memory resources. It may lead to performance degradation, crashes, or inability to free up memory for other processes. Systems using AMD GPUs with frequent firmware reloads are particularly affected.

Mitigation Strategies

Update your Linux kernel to a version that includes the fix for this vulnerability. The patch ensures BO pinning is handled correctly, preventing leaks. Check your distribution's updates or apply the upstream kernel patch directly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68234. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart