CVE-2026-68427
- Source
- https://cve.org/CVERecord?id=CVE-2026-68427
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68427.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-68427
- Downstream
- Published
- 2026-08-10T12:04:47Z
- Modified
- 2026-08-21T03:30:16Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
__host1x_bo_unpin() drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cache local variable instead.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68427.json" }- References
-
- https://git.kernel.org/stable/c/266cddf7bd0f6c79b6c0633aef742a22bf70265b
- https://git.kernel.org/stable/c/5b7e5f84d3d4cea10c3764d2da274810a7934228
- https://git.kernel.org/stable/c/5f4de3c717d34a24d555af581947742980778c02
- https://git.kernel.org/stable/c/86a9bd8c8f422d5f3079da31e151868902fcc702
- https://git.kernel.org/stable/c/abeff53233b984571b87582bb588b4b38ef4ea50
- https://git.kernel.org/stable/c/b773faa32b0a98c3eb2b50d96de631681e5d1157
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68427.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-68427
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedaf755456299d44e4ed6af3b7c70a7f03ea37fdf1Fixed86a9bd8c8f422d5f3079da31e151868902fcc702
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced71c017b3f83ff72638f2a1b1d6d4e7bc61d30231Fixedabeff53233b984571b87582bb588b4b38ef4ea50
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced0e9dd7cfb9986b78cc81eca126ccfbf57f4c0602Fixed5b7e5f84d3d4cea10c3764d2da274810a7934228
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8c0d3cf0d5108c96317e0eca92b60dd368867cefFixed5f4de3c717d34a24d555af581947742980778c02
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceddf63c76f9c8d881ca7bce1aecfba512328d0527dFixedb773faa32b0a98c3eb2b50d96de631681e5d1157
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3cbf5e3c46e66d9b3b6b91099bb720c6cb1be3bcFixed266cddf7bd0f6c79b6c0633aef742a22bf70265b
Linux / Kernel
Package
- Name
- Kernel