CVE-2026-68232: drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict
In the Linux kernel, the following vulnerability has been resolved:
drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict
If kvmallocarray() fails in drmgpusvmrangeevict(), the MM reference acquired earlier is not released, resulting in a reference leak.
Fix this by dropping the MM reference on the kvmallocarray() failure path.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68232?
CVE-2026-68232 has a risk rating of 12, indicating a high severity level.
What does CVE-2026-68232 affect?
CVE-2026-68232 affects the Linux kernel, specifically the drm/gpusvm functionality.
How do I fix CVE-2026-68232?
To fix CVE-2026-68232, ensure you update the Linux kernel to the patched version that resolves the MM reference leak.
What is the nature of the vulnerability in CVE-2026-68232?
CVE-2026-68232 is a reference leak in drm_gpusvm_range_evict, which occurs when kvmalloc_array() fails.
Is there a risk of exploitation with CVE-2026-68232?
Given its high severity rating, CVE-2026-68232 carries a risk of potential exploitation if not addressed promptly.