Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-68238

drm/amdgpu: Release VFCT ACPI table reference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Release VFCT ACPI table reference amdgpu_acpi_vfct_bios() fetches the VFCT table with acpi_get_table() but never releases it. acpi_get_table() takes a reference on the table (incrementing its validation_count and mapping it on the 0->1 transition); without a paired acpi_put_table() the mapping is leaked on every call, whether or not a matching VBIOS image is found. Route all exit paths after the table is acquired through a common acpi_put_table(). The VBIOS image is copied out with kmemdup() before the table is released, so it remains valid for the caller. (cherry picked from commit ca5988682b4cba4cd125a0fa99b2de1239164ae4)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 1c19e02a689661a9687d689dcc5995d3be538262affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 1748043b5114ce5ee5ee874d5f821a158d70631caffected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 50a75929c0c5e8ab29a3ac49dc92489873d9d261affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 312278b3091912fa56a6a587609f17dcb33465c2affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 9b7de3ee5d2c5ee2a706e5f7ca0126f4fbea4da8affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 65bff26617607c1331283232016c0e89088c5b78affected

Linux Linux

Default version status: affected

  • 4.2affected
  • 0 to < 4.2unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References