CVE-2026-68240
Received Received - Intake

Memory Leak in Linux Kernel GPU SVM

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored the local dpagemap into svm_pages->dpagemap on the success path. If a later page failed (e.g. -EOPNOTSUPP when ctx->allow_mixed is false) and jumped to err_unmap, svm_pages->dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped device_unmap() and leaked the device mappings already created. Assign svm_pages->dpagemap when the first device page is mapped so the err_unmap path can device_unmap() those mappings. This issue was found by Sashiko AI review.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68240
EUVD
EUVD-2026-55341

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory management issue in the GPU SVM (Shared Virtual Memory) subsystem. When mapping device pages, the system failed to properly track the page mappings, leading to a leak of device mappings if an error occurred during the process. The fix ensures the page mapping is published early so cleanup can occur correctly.

Detection Guidance

This vulnerability is specific to the Linux kernel's GPU SVM (Shared Virtual Memory) subsystem and requires kernel-level inspection. Detection involves checking kernel logs for GPU-related errors or memory mapping failures. Use commands like dmesg | grep -i gpu or journalctl -k | grep -i drm to review kernel messages for GPU SVM errors.

Impact Analysis

This vulnerability could lead to resource leaks in the Linux kernel, potentially causing system instability or unexpected behavior if exploited. It may affect systems using GPU SVM features, though the practical impact depends on specific configurations and usage scenarios.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch this issue. If immediate patching is not possible, restrict access to GPU devices for untrusted users or processes to reduce exposure. Monitor kernel logs for GPU-related errors as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68240. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart