Use-after-free in Linux kernel - CVE-2026-68273

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free and NULL pointer dereference in the amdgpu context pstate handling code when initializing or finalizing GPU contexts while stable pstate state changes are processed. A local user can create and tear down crafted contexts to cause a denial of service.

The issue arises because context pstate ownership transitions were not consistently protected by the stable_pstate_ctx_lock, and sysfs-triggered state changes can race with context handling.

Affected software

How to mitigate CVE-2026-68273

External References

• https://git.kernel.org/stable/c/23a8726e1d7597fe7c9a59d5dc42ba8b7d345b8a
• https://git.kernel.org/stable/c/9f9c88eb298c54348be3ca4087f4f4c615065b87
• https://git.kernel.org/stable/c/c1dc4ccb82c9e56325d8e7514ca4c90bd1efb351
• https://git.kernel.org/stable/c/e06c39cc1c48dca68a5ffd971c23025a52d46634

Related Security Bulletins

• Use-after-free in Linux kernel amd amdgpu driver
• Debian update for linux