CVE-2026-68104: drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: invoke pmgenpdremove() before freeing genpd
Call pmgenpdremove() to unregister from global list prior to releasing acpgenpd memory, and clear the pointer after free.
(cherry picked from commit cd8650d7a91ee8b768e202354672553faa5cc1f2)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel DRM/amdgpu code path, invoke pm_genpd_remove() to unregister the genpd from the global list before freeing the genpd memory, then clear the pointer after free.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68104?
CVE-2026-68104 has a risk rating of 34.
How do I fix CVE-2026-68104?
To fix CVE-2026-68104, ensure that pm_genpd_remove() is invoked before freeing acp_genpd memory.
What systems are affected by CVE-2026-68104?
CVE-2026-68104 affects the Linux kernel, particularly versions utilizing amdgpu.
What type of vulnerability is CVE-2026-68104?
CVE-2026-68104 is a memory management vulnerability in the Linux kernel's amdgpu driver.
Has CVE-2026-68104 been patched?
Yes, CVE-2026-68104 has been resolved in a recent update to the Linux kernel.