CVE-2026-68105

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) HashiCorp Vault versions prior to 1.16.8 HashiCorp Vault versions prior to 1.17.4

Description In the Linux kernel, a NULL pointer dereference occurs in the gfx v12 1 wait reg mem() function during driver load failure. This happens when MES initialization fails, causing the KIQ ring to be incorrectly marked as ready on ASICs that use MES, as the KIQ is owned by MES.

In HashiCorp Vault, a logic error in the Transit Secrets Engine caching mechanism allows the memory manager to fail in enforcing read-policy restrictions on cached cryptographic keys. An authenticated user or local application container with minimal read-only access can craft a modified transit request to bypass the access control list (ACL) evaluation. This allows the unauthorized decryption of payloads or the export of private signing keys.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Update HashiCorp Vault and Vault Enterprise to version 1.16.8 or higher. Update HashiCorp Vault and Vault Enterprise to version 1.17.4 or higher. Review and strictly enforce ACL policies to minimize the exposure of transit endpoints across containerized networks.