CVE-2026-68263

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc7

Description An issue exists in the drm/imagination component where the function drm sched entity fini() is called twice. This occurs during a specific call sequence involving pvr context destroy(), pvr context kill queues(), and pvr context put(). The double call to drm sched entity fini() constitutes a misuse of the API and can lead to a refcount underflow, resulting in a use-after-free condition. This was observed in environments using the powervr module on Texas Instruments AM625 hardware.

Recommendations Update the Linux kernel to version 7.0.0-rc7 or later. As a temporary mitigation, restrict the use of the drm sched entity fini() function to only the pvr context create() failure path.