CVE-2026-68238
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Release VFCT ACPI table reference amdgpu_acpi_vfct_bios() fetches the VFCT table with acpi_get_table() but never releases it. acpi_get_table() takes a reference on the table (incrementing its validation_count and mapping it on the 0->1 transition); without a paired acpi_put_table() the mapping is leaked on every call, whether or not a matching VBIOS image is found. Route all exit paths after the table is acquired through a common acpi_put_table(). The VBIOS image is copied out with kmemdup() before the table is released, so it remains valid for the caller. (cherry picked from commit ca5988682b4cba4cd125a0fa99b2de1239164ae4)
How to fix
- Linux Linux1c19e02a689661a9687d689dcc5995d3be538262, 1748043b5114ce5ee5ee874d5f821a158d70631c, 50a75929c0c5e8ab29a3ac49dc92489873d9d261, 312278b3091912fa56a6a587609f17dcb33465c2, 9b7de3ee5d2c5ee2a706e5f7ca0126f4fbea4da8, 65bff26617607c1331283232016c0e89088c5b78 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d38ceaf99ed015f2a0b9af3499791bd3a3daae21 ≤ v < 1c19e02a689661a9687d689dcc5995d3be538262, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 ≤ v < 1748043b5114ce5ee5ee874d5f821a158d70631c, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 ≤ v < 50a75929c0c5e8ab29a3ac49dc92489873d9d261, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 ≤ v < 312278b3091912fa56a6a587609f17dcb33465c2, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 ≤ v < 9b7de3ee5d2c5ee2a706e5f7ca0126f4fbea4da8, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 ≤ v < 65bff26617607c1331283232016c0e89088c5b78, 4.2 | 1c19e02a689661a9687d689dcc5995d3be538262, 1748043b5114ce5ee5ee874d5f821a158d70631c, 50a75929c0c5e8ab29a3ac49dc92489873d9d261, 312278b3091912fa56a6a587609f17dcb33465c2, 9b7de3ee5d2c5ee2a706e5f7ca0126f4fbea4da8, 65bff26617607c1331283232016c0e89088c5b78 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.