CVEvulnerability
CVE-2026-68238
- Status
- Received
- Published
- 2026-08-10
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Release VFCT ACPI table reference
amdgpu_acpi_vfct_bios() fetches the VFCT table with acpi_get_table()
but never releases it. acpi_get_table() takes a reference on the
table (incrementing its validation_count and mapping it on the 0->1
transition); without a paired acpi_put_table() the mapping is leaked
on every call, whether or not a matching VBIOS image is found.
Route all exit paths after the table is acquired through a common
acpi_put_table(). The VBIOS image is copied out with kmemdup() before
the table is released, so it remains valid for the caller.
(cherry picked from commit ca5988682b4cba4cd125a0fa99b2de1239164ae4)
References
- https://git.kernel.org/stable/c/1748043b5114ce5ee5ee874d5f821a158d70631c git.kernel.org
- https://git.kernel.org/stable/c/312278b3091912fa56a6a587609f17dcb33465c2 git.kernel.org
- https://git.kernel.org/stable/c/50a75929c0c5e8ab29a3ac49dc92489873d9d261 git.kernel.org
- https://git.kernel.org/stable/c/65bff26617607c1331283232016c0e89088c5b78 git.kernel.org
- https://git.kernel.org/stable/c/9b7de3ee5d2c5ee2a706e5f7ca0126f4fbea4da8 git.kernel.org