CVE-2026-68107: drm/amdgpu/vcn4: avoid rereading IB param length
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vcn4: avoid rereading IB param length
Reuse the parameter length returned by vcnv40encfindibparam() instead of rereading it from the IB.
This avoids a potential TOCTOU issue if the IB contents change between reads.
(cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68107?
CVE-2026-68107 has a risk score of 34, indicating a moderate severity level.
How do I fix CVE-2026-68107?
To address CVE-2026-68107, update your Linux kernel to the latest version where this vulnerability is patched.
What systems are affected by CVE-2026-68107?
CVE-2026-68107 affects the Linux kernel versions that include the amdgpu driver with vcn4 support.
What type of vulnerability is CVE-2026-68107?
CVE-2026-68107 is classified as a time-of-check to time-of-use (TOCTOU) vulnerability.
When was CVE-2026-68107 published?
CVE-2026-68107 was published on August 10, 2026.