CVE-2026-68245

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-08-10 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() The vm pointer returned from amdgpu_vm_get_vm_from_pasid() is only valid while the lock is still being held. Once xa_unlock_irqrestore is called and returned, the pointer is no longer under lock and is subject to modification. Since, the caller still dereferences vm->task_info in amdgpu_vm_get_task_info_vm() after the lock is removed, this causes a use after unlock problem. Remove the lifetime issue present in amdgpu_vm_get_task_info_pasid() through removing the amdgpu_vm_get_vm_from_pasid() function from amdgpu_vm.c and making the relevant code inline to hold the lock while it is still in use. (cherry picked from commit 9d01579f3f868b333acc901815972685989092c7)

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Linux Linux b8f67b9ddf4f8fe6dd536590712b5912ad78f99c < fe16a7e5336ae888751984e30c451fbf7cfa5df7
Linux Linux b8f67b9ddf4f8fe6dd536590712b5912ad78f99c < 1173190412fb9d12e7efce76734118d9712ff970
Linux Linux b8f67b9ddf4f8fe6dd536590712b5912ad78f99c < 5d5fb9124a2bba96a7807086d8fe0f7ce810d546
Linux Linux b8f67b9ddf4f8fe6dd536590712b5912ad78f99c < 04cc4aa3617b0ed67e859f91f09de5d896a46f3a
Linux Linux aa22d6c58505d239814b5ef8fa7da4ce43e9212b
Linux Linux 251840f22eff35c25de531a3fcb523df94c128c0
Linux Linux 6.1.191 < 6.2
Linux Linux 6.6.160 < 6.7
Linux Linux 6.9

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001300
Percentile 2.6%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00130
2026-10-31
0.00130
2026-10-30
0.00130
2026-10-29
0.00130

Intelligence Sources

mitre ref →
nvd ref →