CVE-2026-68245

Received Received - Intake

Use-After-Unlock in AMDGPU VM Task Info Handling

Publication date: 2026-08-10

Last updated on: 2026-08-18

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() The vm pointer returned from amdgpu_vm_get_vm_from_pasid() is only valid while the lock is still being held. Once xa_unlock_irqrestore is called and returned, the pointer is no longer under lock and is subject to modification. Since, the caller still dereferences vm->task_info in amdgpu_vm_get_task_info_vm() after the lock is removed, this causes a use after unlock problem. Remove the lifetime issue present in amdgpu_vm_get_task_info_pasid() through removing the amdgpu_vm_get_vm_from_pasid() function from amdgpu_vm.c and making the relevant code inline to hold the lock while it is still in use. (cherry picked from commit 9d01579f3f868b333acc901815972685989092c7)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-18

Generated

2026-08-30

AI Q&A

2026-08-10

EPSS Evaluated

2026-08-29

NVD

CVE-2026-68245

EUVD

EUVD-2026-55346

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a use-after-unlock vulnerability in the Linux kernel's AMD GPU driver. It occurs when a function retrieves a pointer to a structure while holding a lock, but then uses that pointer after the lock is released. The pointer may become invalid or point to modified data once the lock is gone, leading to potential memory corruption or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and does not have network-based detection methods. Detection involves checking the kernel version and AMD GPU driver for the affected code. Use commands like uname -a to check kernel version and modinfo amdgpu to inspect the driver.

Impact Analysis

This vulnerability could cause system instability, crashes, or unexpected behavior in applications using the AMD GPU driver. It may lead to data corruption or security issues if exploited maliciously. Users might experience graphical glitches, application failures, or system freezes.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a Linux kernel memory management issue specific to AMD GPU drivers. Compliance impacts would depend on system configuration and usage rather than this specific vulnerability.

Mitigation Strategies

Apply the latest kernel updates or patches that address this issue. If using a distribution-specific kernel, check for and install updates from your vendor. Reboot the system after applying patches to ensure the updated kernel is active.

Hi! I’m here to help you understand CVE-2026-68245. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70