CVE-2026-68240
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
17/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/gpusvm: publish dpagemap early to avoid device mapping leak on error<br />
<br />
drm_gpusvm_get_pages() only stored the local dpagemap into<br />
svm_pages->dpagemap on the success path. If a later page failed (e.g.<br />
-EOPNOTSUPP when ctx->allow_mixed is false) and jumped to err_unmap,<br />
svm_pages->dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped<br />
device_unmap() and leaked the device mappings already created.<br />
<br />
Assign svm_pages->dpagemap when the first device page is mapped so the<br />
err_unmap path can device_unmap() those mappings.<br />
<br />
This issue was found by Sashiko AI review.
Impact
Base Score 3.x
8.80
Severity 3.x
HIGH