CVE-2026-68238

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amdgpu: Release VFCT ACPI table reference<br /> <br /> amdgpu_acpi_vfct_bios() fetches the VFCT table with acpi_get_table()<br /> but never releases it. acpi_get_table() takes a reference on the<br /> table (incrementing its validation_count and mapping it on the 0-&gt;1<br /> transition); without a paired acpi_put_table() the mapping is leaked<br /> on every call, whether or not a matching VBIOS image is found.<br /> <br /> Route all exit paths after the table is acquired through a common<br /> acpi_put_table(). The VBIOS image is copied out with kmemdup() before<br /> the table is released, so it remains valid for the caller.<br /> <br /> (cherry picked from commit ca5988682b4cba4cd125a0fa99b2de1239164ae4)