CVE-2026-68234

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the amdgpu bo create reserved() function where the system unconditionally reserves, pins, gart allocates, and maps the Buffer Object (BO) even if the bo ptr input parameter is non-NULL. When a non-NULL BO pointer is passed repeatedly—such as during firmware buffer re-loads under AMDGPU FW LOAD DIRECT—the amdgpu bo pin() function increases the pin count unconditionally. Because the corresponding teardown process only unpins the object once, the pin count never reaches zero. This prevents the Translation Table Manager (TTM), a memory manager for graphics drivers, from moving, swapping, or evicting the BO, resulting in BO leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.