CVE-2026-68380

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the job scheduler of the accel/amdxdna component. The function amdxdna cmd submit() stores current->mm in job->mm without maintaining a proper reference. Subsequently, the aie2 sched job run() function accesses job->mm from the DRM scheduler worker thread. Because only a raw pointer is used without a structural reference, the mm struct (a structure representing the memory descriptor of a process) can be freed before the scheduler executes the job.

Recommendations Update the Linux kernel to a version where the mmgrab() function is called to maintain a structural mm count reference for the duration of the job, and mmdrop() is implemented in all cleanup paths.