CVE-2026-68380
Description
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_submit() stores current->mm in job->mm without holding any reference. aie2_sched_job_run() later access job->mm from the DRM scheduler worker thread. With only a raw pointer and no structural reference, the mm_struct can be freed before the scheduler runs the job. Fix this by calling mmgrab() to hold a structural mm_count reference for the lifetime of the job, paired with mmdrop() in every cleanup path.
How to fix
- Linux Linux6875ee2bef48f5d9f045d81a8a4d68893f768a8a, e8fadbffc19a233d1eedebfb8df0f522d1388280, faebb7ba1ac65fa5810b640df02ce04e509fdc11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | aac243092b707bb3018e951d470cc1a9bcbaba6c ≤ v < 6875ee2bef48f5d9f045d81a8a4d68893f768a8a, aac243092b707bb3018e951d470cc1a9bcbaba6c ≤ v < e8fadbffc19a233d1eedebfb8df0f522d1388280, aac243092b707bb3018e951d470cc1a9bcbaba6c ≤ v < faebb7ba1ac65fa5810b640df02ce04e509fdc11, 6.14 | 6875ee2bef48f5d9f045d81a8a4d68893f768a8a, e8fadbffc19a233d1eedebfb8df0f522d1388280, faebb7ba1ac65fa5810b640df02ce04e509fdc11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.