CVE-2026-68303drm/vc4: hvs/v3d: Fix null dereference in unbind
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hvs/v3d: Fix null dereference in unbind The hvs and v3d drivers use dev_get_drvdata(master) in their unbind functions. Since the vc4-drm gets removed before its dependent drivers (vc4_hvs/vc4_v3d) the vc4_hvs_unbind/vc4_v3d_unbind functions try to get drvdata of its master and fails with a null dereference error. Use the data pointer passed to the unbind functions directly instead of dev_get_drvdata(master). This avoids using potentially freed memory.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 21, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c8b75bca92cbf064b9fa125fc74a85994452e935 before 8f62aae059e06746a18a00af27179c3c0f17f4c7; from c8b75bca92cbf064b9fa125fc74a85994452e935 before 708688ec31ac6b35103ba364dc300a09930079d4; from c8b75bca92cbf064b9fa125fc74a85994452e935 before 261f0a3f0ac03248284f5116d3258f89c9642215; from c8b75bca92cbf064b9fa125fc74a85994452e935 before 7dc3680b7ffe01add3e9299fde8471d2dd53a8ae | CNA record |
References
- https://git.kernel.org/stable/c/8f62aae059e06746a18a00af27179c3c0f17f4c7
- https://git.kernel.org/stable/c/708688ec31ac6b35103ba364dc300a09930079d4
- https://git.kernel.org/stable/c/261f0a3f0ac03248284f5116d3258f89c9642215
- https://git.kernel.org/stable/c/7dc3680b7ffe01add3e9299fde8471d2dd53a8ae
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.