Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-68240

Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
17/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/gpusvm: publish dpagemap early to avoid device mapping leak on error<br /> <br /> drm_gpusvm_get_pages() only stored the local dpagemap into<br /> svm_pages-&gt;dpagemap on the success path. If a later page failed (e.g.<br /> -EOPNOTSUPP when ctx-&gt;allow_mixed is false) and jumped to err_unmap,<br /> svm_pages-&gt;dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped<br /> device_unmap() and leaked the device mappings already created.<br /> <br /> Assign svm_pages-&gt;dpagemap when the first device page is mapped so the<br /> err_unmap path can device_unmap() those mappings.<br /> <br /> This issue was found by Sashiko AI review.