CVE-2026-68380

High

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_submit() stores current->mm in job->mm without holding any reference. aie2_sched_job_run() later access job->mm from the DRM scheduler worker thread. With only a raw pointer and no structural reference, the mm_struct can be freed before the scheduler runs the job. Fix this by calling mmgrab() to hold a structural mm_count reference for the lifetime of the job, paired with mmdrop() in every cleanup path.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedAug 10, 2026
First seenAug 10, 2026

How to fix

Update
  • Linux Linux6875ee2bef48f5d9f045d81a8a4d68893f768a8a, e8fadbffc19a233d1eedebfb8df0f522d1388280, faebb7ba1ac65fa5810b640df02ce04e509fdc11 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxaac243092b707bb3018e951d470cc1a9bcbaba6c ≤ v < 6875ee2bef48f5d9f045d81a8a4d68893f768a8a, aac243092b707bb3018e951d470cc1a9bcbaba6c ≤ v < e8fadbffc19a233d1eedebfb8df0f522d1388280, aac243092b707bb3018e951d470cc1a9bcbaba6c ≤ v < faebb7ba1ac65fa5810b640df02ce04e509fdc11, 6.146875ee2bef48f5d9f045d81a8a4d68893f768a8a, e8fadbffc19a233d1eedebfb8df0f522d1388280, faebb7ba1ac65fa5810b640df02ce04e509fdc11

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.