CVE-2026-68445

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/vc4 component where the vc4 gem object mmap() function fails to clear the VM MAYWRITE flag when rejecting a writable mapping of a validated shader BO (Buffer Object). This allows userspace to initially map the BO as read-only and subsequently use mprotect() to make it writable. Because the GPU trusts the instructions after a single validation check, this behavior enables userspace to rewrite the code after validation, effectively bypassing the validator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.