CVE-2026-68245
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
18/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()<br />
<br />
The vm pointer returned from amdgpu_vm_get_vm_from_pasid() is only<br />
valid while the lock is still being held. Once xa_unlock_irqrestore is<br />
called and returned, the pointer is no longer under lock and is subject<br />
to modification. Since, the caller still dereferences vm->task_info in<br />
amdgpu_vm_get_task_info_vm() after the lock is removed, this causes a<br />
use after unlock problem.<br />
<br />
Remove the lifetime issue present in amdgpu_vm_get_task_info_pasid()<br />
through removing the amdgpu_vm_get_vm_from_pasid() function from<br />
amdgpu_vm.c and making the relevant code inline to hold the lock while<br />
it is still in use.<br />
<br />
(cherry picked from commit 9d01579f3f868b333acc901815972685989092c7)
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH


