CVE-2026-68240

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A device mapping leak occurs in the drm/gpusvm component. The drm gpusvm get pages() function only stores the local dpagemap into svm pages->dpagemap upon successful completion. If a subsequent page fails—for instance, returning -EOPNOTSUPP when ctx->allow mixed is false—the process jumps to err unmap while svm pages->dpagemap remains NULL. Consequently, the drm gpusvm unmap pages() function skips the device unmap() process, leading to a leak of the device mappings that were already created.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.