CVE-2026-68238
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
drm/amdgpu: Release VFCT ACPI table reference
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Release VFCT ACPI table reference amdgpu_acpi_vfct_bios() fetches the VFCT table with acpi_get_table() but never releases it. acpi_get_table() takes a reference on the table (incrementing its validation_count and mapping it on the 0->1 transition); without a paired acpi_put_table() the mapping is leaked on every call, whether or not a matching VBIOS image is found. Route all exit paths after the table is acquired through a common acpi_put_table(). The VBIOS image is copied out with kmemdup() before the table is released, so it remains valid for the caller. (cherry picked from commit ca5988682b4cba4cd125a0fa99b2de1239164ae4)
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| d38ceaf99ed015f2a0b9af3499791bd3a3daae21 | affected | git | 1748043b5114ce5ee5ee874d5f821a158d70631c | Unavailable | None listed |
| d38ceaf99ed015f2a0b9af3499791bd3a3daae21 | affected | git | 50a75929c0c5e8ab29a3ac49dc92489873d9d261 | Unavailable | None listed |
| d38ceaf99ed015f2a0b9af3499791bd3a3daae21 | affected | git | 312278b3091912fa56a6a587609f17dcb33465c2 | Unavailable | None listed |
| d38ceaf99ed015f2a0b9af3499791bd3a3daae21 | affected | git | 9b7de3ee5d2c5ee2a706e5f7ca0126f4fbea4da8 | Unavailable | None listed |
| d38ceaf99ed015f2a0b9af3499791bd3a3daae21 | affected | git | 65bff26617607c1331283232016c0e89088c5b78 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.2 | Unavailable | None listed |
| 6.6.160 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.114 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.42 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.1.6 | unaffected | semver | Unavailable | 7.1.* | None listed |
| 7.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |