CVE-2026-68427: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
In the Linux kernel, the following vulnerability has been resolved:
gpu: host1x: Fix use-after-free in host1xboclearcachedmappings
host1xbounpin() drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cache local variable instead.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the Linux kernel patch that fixes “Fix use-after-free in host1x_bo_clear_cached_mappings” (__host1x_bo_unpin use-after-free) by updating the kernel to the resolved version provided by your vendor/distribution.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68427?
CVE-2026-68427 has a risk score of 43, indicating a moderate severity level.
How do I fix CVE-2026-68427?
To fix CVE-2026-68427, update the Linux kernel to the latest version where the vulnerability has been resolved.
What type of vulnerability is CVE-2026-68427?
CVE-2026-68427 is a use-after-free vulnerability in the Linux kernel's host1x subsystem.
Which software is affected by CVE-2026-68427?
CVE-2026-68427 affects the Linux kernel.
What is the impact of CVE-2026-68427?
The impact of CVE-2026-68427 can lead to potential denial of service or arbitrary code execution if exploited.