CVE-2026-68240
Description
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored the local dpagemap into svm_pages->dpagemap on the success path. If a later page failed (e.g. -EOPNOTSUPP when ctx->allow_mixed is false) and jumped to err_unmap, svm_pages->dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped device_unmap() and leaked the device mappings already created. Assign svm_pages->dpagemap when the first device page is mapped so the err_unmap path can device_unmap() those mappings. This issue was found by Sashiko AI review.
How to fix
- Linux Linuxe8362523fd1b61712f7d996802f9b5dee545c7e6, 72e4fca5529e45b5beebad79d804de442f632324, 7f708f51e3955bda0d77a0b67ab9bea6c97fea99 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 ≤ v < e8362523fd1b61712f7d996802f9b5dee545c7e6, f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 ≤ v < 72e4fca5529e45b5beebad79d804de442f632324, f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 ≤ v < 7f708f51e3955bda0d77a0b67ab9bea6c97fea99, 6.18 | e8362523fd1b61712f7d996802f9b5dee545c7e6, 72e4fca5529e45b5beebad79d804de442f632324, 7f708f51e3955bda0d77a0b67ab9bea6c97fea99 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.