CVE-2026-68245 drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()
A race condition in the Linux kernel's amdgpu driver allows attackers to trigger a use-after-free, potentially leading to code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-68245?
CVE-2026-68245 is a high-severity vulnerability in Linux, published on 10 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()
The vm pointer returned from amdgpu_vm_get_vm_from_pasid() is only valid while the lock is still being held. Once xa_unlock_irqrestore is called and returned, the pointer is no longer under lock and is subject to modification. Since, the caller still dereferences vm->task_info in amdgpu_vm_get_task_info_vm() after the lock is removed, this causes a use after unlock problem.
Remove the lifetime issue present in amdgpu_vm_get_task_info_pasid() through removing the amdgpu_vm_get_vm_from_pasid() function from amdgpu_vm.c and making the relevant code inline to hold the lock while it is still in use.
(cherry picked from commit 9d01579f3f868b333acc901815972685989092c7)
Weakness: CWE-362
Which versions are affected by CVE-2026-68245?
How do I fix CVE-2026-68245?
Apply the vendor's patch.
Is CVE-2026-68245 being exploited?
There is no known exploitation of CVE-2026-68245 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-68245, DEBIAN-CVE-2026-68245, GHSA-j4xg-92j8-hcv5, UBUNTU-CVE-2026-68245.