CVE-2026-68427

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the host1x bo clear cached mappings function. This occurs because host1x bo unpin() drops the last reference to the mapping and frees it, making subsequent dereferences of the mapping invalid. The issue can be resolved by using the cache local variable, which outlives the mapping.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.