CVE-2026-68262
Received Received - Intake

Memory Corruption in Linux Kernel DRM/PVR Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_set_uobj_array() pvr_set_uobj_array() copies an array of kernel objects to a userspace array whose element size is described by out->stride. When out->stride is different from the kernel object size, the slow path advances the userspace pointer by the kernel object size and the kernel pointer by the userspace stride. This reverses the intended layout. For larger userspace strides, later copies read from the wrong kernel addresses. For smaller userspace strides, later copies are written at the wrong userspace offsets. The padding clear is also done only for the first element instead of the padding area for each element. Advance the userspace pointer by out->stride and the kernel pointer by obj_size, and clear per-element padding while the current userspace pointer is still available.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68262
EUVD
EUVD-2026-55363

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a function called pvr_set_uobj_array() which handles copying an array of kernel objects to userspace. The issue occurs when the stride (element size) in userspace differs from the kernel object size. This mismatch causes the function to incorrectly advance pointers, leading to wrong memory addresses being read or written. It also fails to clear padding properly for each element.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/imagination driver and requires kernel-level inspection. Detection involves checking kernel logs for errors related to pvr_set_uobj_array() or examining kernel memory corruption patterns. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could allow an attacker to read or write to unintended memory locations, potentially leading to data corruption, privilege escalation, or unauthorized access to sensitive information. It may also cause system instability or crashes due to incorrect memory operations.

Mitigation Strategies

Apply the latest Linux kernel patches from your distribution to resolve the issue. If immediate patching is not possible, restrict access to GPU/drm functionality or disable the affected driver module (pvr) until updates are applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68262. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart