SB20260812254 - Always-Incorrect Control Flow Implementation in Linux kernel drm imagination driver

Description

This security bulletin contains information about 1 vulnerability.

1) Always-Incorrect Control Flow Implementation (CVE-ID: CVE-2026-68281)

CWE-ID: CWE-670 - Always-Incorrect Control Flow Implementation

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of dependencies in prepare_job() in the PowerVR DRM scheduler queue handling code when submitting paired geometry and fragment jobs to the fragment CCCB. A local user can submit specially crafted paired jobs to cause a denial of service.

The issue can lead to kernel warnings and potentially job timeouts when the fragment command queue is almost full.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/02b0da249c8f78d2bbf9f498bbd371c66142b0af
• https://git.kernel.org/stable/c/943fa73ea0efa335d9c1800fcfac47915de4ff89
• https://git.kernel.org/stable/c/9cd74f935306cd857f46686975c43383e1d95f94
• https://git.kernel.org/stable/c/a673171502e87acb5a9e2923f4cf9dce521fd05e