CVE-2026-68245

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after unlock issue exists in the drm/amdgpu component. The vm pointer returned by the amdgpu vm get vm from pasid() function is only valid while the lock is held. When xa unlock irqrestore() is called and returns, the pointer is no longer protected and can be modified. Because the caller continues to dereference vm->task info within the amdgpu vm get task info vm() function after the lock is released, a memory safety issue occurs. This is addressed by removing the amdgpu vm get vm from pasid() function from amdgpu vm.c and inlining the code to ensure the lock is held during use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.