CVE-2026-68245: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix lifetime issue of amdgpuvmgettaskinfopasid()
The vm pointer returned from amdgpuvmgetvmfrompasid() is only valid while the lock is still being held. Once xaunlockirqrestore is called and returned, the pointer is no longer under lock and is subject to modification. Since, the caller still dereferences vm->taskinfo in amdgpuvmgettaskinfovm() after the lock is removed, this causes a use after unlock problem.
Remove the lifetime issue present in amdgpuvmgettaskinfopasid() through removing the amdgpuvmgetvmfrompasid() function from amdgpuvm.c and making the relevant code inline to hold the lock while it is still in use.
(cherry picked from commit 9d01579f3f868b333acc901815972685989092c7)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68245?
CVE-2026-68245 has a risk score of 34, indicating a low to medium severity level.
How do I fix CVE-2026-68245?
To fix CVE-2026-68245, ensure you update your Linux kernel to the latest patched version that resolves this vulnerability.
What component is affected by CVE-2026-68245?
CVE-2026-68245 affects the DRM (Direct Rendering Manager) component of the AMDGPU driver in the Linux kernel.
What type of vulnerability is CVE-2026-68245?
CVE-2026-68245 is a lifetime management issue related to resource handling in the Linux kernel.
Who is impacted by CVE-2026-68245?
Users of affected versions of the Linux kernel with DRM AMDGPU support may be impacted by CVE-2026-68245.