CVE-2026-68240drm/gpusvm: publish dpagemap early to avoid device mapping leak on error
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored the local dpagemap into svm_pages->dpagemap on the success path. If a later page failed (e.g. -EOPNOTSUPP when ctx->allow_mixed is false) and jumped to err_unmap, svm_pages->dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped device_unmap() and leaked the device mappings already created. Assign svm_pages->dpagemap when the first device page is mapped so the err_unmap path can device_unmap() those mappings. This issue was found by Sashiko AI review.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 before e8362523fd1b61712f7d996802f9b5dee545c7e6; from f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 before 72e4fca5529e45b5beebad79d804de442f632324; from f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 before 7f708f51e3955bda0d77a0b67ab9bea6c97fea99 | CNA record |
References
- https://git.kernel.org/stable/c/e8362523fd1b61712f7d996802f9b5dee545c7e6
- https://git.kernel.org/stable/c/72e4fca5529e45b5beebad79d804de442f632324
- https://git.kernel.org/stable/c/7f708f51e3955bda0d77a0b67ab9bea6c97fea99
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.