CVE-2026-68107 drm/amdgpu/vcn4: avoid rereading IB param length
A time-of-check time-of-use race condition in the AMD GPU video codec driver allows attackers to potentially execute arbitrary code or escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-68107?
CVE-2026-68107 is a high-severity vulnerability in Linux, published on 10 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vcn4: avoid rereading IB param length
Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB.
This avoids a potential TOCTOU issue if the IB contents change between reads.
(cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)
Weakness: CWE-367
Which versions are affected by CVE-2026-68107?
How do I fix CVE-2026-68107?
Apply the vendor's patch.
Is CVE-2026-68107 being exploited?
There is no known exploitation of CVE-2026-68107 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-68107, DEBIAN-CVE-2026-68107, GHSA-37mr-g2c4-w7wf, UBUNTU-CVE-2026-68107.