CVE Catalog

CVE-2026-68104

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

3th percentile - higher than 3% of all known CVEs

Summary

In the Linux kernel, the amdgpu driver fixed a memory management issue: before freeing acp_genpd memory, pm_genpd_remove() is called to unregister from the global list, and the pointer is cleared after free.

Risk Assessment

Lack of unregistration may lead to use-after-free or memory leaks, potentially destabilizing the system.

Recommendation

Apply the Linux kernel update containing this commit to ensure proper memory management.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Call pm_genpd_remove() to unregister from global list prior to releasing acp_genpd memory, and clear the pointer after free. (cherry picked from commit cd8650d7a91ee8b768e202354672553faa5cc1f2)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS