Skip to main content

Linux Kernel CVE-2026-68104

| EUVDEUVD-2026-55485 HIGH
2026-08-10 Linux GHSA-2mjh-222w-43qx
Information Disclosure Linux
High
Disputed · 7.8 Vendor: Linux
Share

Severity by source

Sources disagree (Low–High)
Vendor (Linux) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
7.8 HIGH

Local driver teardown trigger requires low-privileged access; kernel use-after-free enables full memory compromise with no scope change.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SUSE
2.5 LOW
AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Red Hat
5.5 MEDIUM
qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Linux

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Generated
Aug 14, 2026 - 02:14 vuln.today
CVSS changed
Aug 13, 2026 - 23:37 NVD
7.8 (HIGH)
Patch available
Aug 10, 2026 - 14:18 EUVD
CVE Published
Aug 10, 2026 - 11:58 cve.org
HIGH 7.8
CVE Published
Aug 10, 2026 - 11:58 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: invoke pm_genpd_remove() before freeing genpd

Call pm_genpd_remove() to unregister from global list prior to releasing acp_genpd memory, and clear the pointer after free.

(cherry picked from commit cd8650d7a91ee8b768e202354672553faa5cc1f2)

AnalysisAI

Use-after-free in the Linux kernel's drm/amdgpu driver arises from freeing the ACP (Audio CoProcessor) generic power domain memory before unregistering it from the kernel's global power domain list via pm_genpd_remove(), leaving a dangling pointer in that list. Systems running a vulnerable kernel with AMD GPU hardware present are exposed to a local privilege escalation path - an attacker with low-privileged local access could trigger kernel memory corruption during driver teardown. No public exploit code exists and EPSS is 0.17% (6th percentile), but the CVSS 7.8 score reflects potential for full system compromise if exploited.

Technical ContextAI

The affected code resides in the drm/amdgpu kernel subsystem, specifically the ACP (Audio CoProcessor) power management path, which uses the Linux kernel's generic power domain (genpd) framework. The genpd framework maintains a global list of registered power domains; the acp_genpd structure represents the AMD audio coprocessor's power domain entry. The ordering bug is in teardown: the driver freed the acp_genpd memory without first calling pm_genpd_remove() to deregister from the global list, leaving a stale pointer in the global list that references freed memory - a classic use-after-free pattern consistent with CWE-416 (though no CWE is formally assigned). The affected CPE is cpe:2.3:a:linux:linux:* across all stable branches prior to the fix commits. The fix additionally clears the pointer after free to prevent double-free reuse.

RemediationAI

The primary remediation is upgrading to a fixed Linux kernel stable release: 6.6.148, 6.12.101, 6.18.42, 7.1.6, or 7.2-rc2 or later. Upstream stable patches are available at https://git.kernel.org/stable/c/bdfc7f1e0900ef1361b828c4f69b72701f8a0a86, https://git.kernel.org/stable/c/5c0a82283271759fff445ac27182072f200a888c, https://git.kernel.org/stable/c/08fee493e0261f9e4120a5c8e7e42e8a723574e8, https://git.kernel.org/stable/c/930a5dc3df4aa5e10393134bd5313d616dbebaf6, and https://git.kernel.org/stable/c/28c9b3c5dc35cc790d11e26ca3fc6e068be63998. Where immediate kernel upgrades are not feasible, a compensating control is to blacklist the amdgpu module (add 'blacklist amdgpu' to /etc/modprobe.d/blacklist.conf and reboot) - this eliminates the attack surface entirely but disables all AMD GPU functionality. Restricting local user access to multi-user systems with AMD GPU hardware reduces exposure but does not eliminate the flaw.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Low
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 16.0 Affected

Share

CVE-2026-68104 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy