CVE-2026-68234
Detail
Received This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
amdgpu_bo_create_reserved() only allocates a new BO when
*bo_ptr (struct amdgpu_bo **bo_ptr as input parameter) is
NULL, it simply skips creation when *bo_ptr is non-NULL.
But it unconditionally reserves, pins, gart allocates
and maps the BO afterwards.
When the same non-NULL BO pointer is passed in again,
for example firmware buffers that live in adev and are
re-loaded on every resume / cp_resume / start
under AMDGPU_FW_LOAD_DIRECT, amdgpu_bo_pin() just increases
pin_count unconditionally, however the matching teardown only unpins
once, so pin_count never drops to zero, so TTM is not able
to move, swap or evict a BO, causing BO leaks.
This commit fixes this issue by only pinning the bo
once at creation, and repeated calls no longer
take additional pin references.
(cherry picked from commit 3ddc0ae76202c447b6aec61e907b852bc94671cf)
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected]
Change History
4 change records found show changes
CVE Modified by kernel.org
8/19/2026 1:20:38 PM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/stable/c/7aea619d9f186dcf0f1289879e9edb69d2b56639
Added
Reference
https://git.kernel.org/stable/c/b572d0814c1366701ca704286589fab025802566
Added
Reference
https://git.kernel.org/stable/c/e06e0885725a16304b7723aeb478a78cca9dc96a
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"51eeef1949c11d3dcb5f422a5d9b3f09ebe8a1bc","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"2f390b4c83011452753fd84972f657d2b00a952b","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"ba7b6444097a73ccd3d3ac9e2be4ebb73d226460","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"9743f60013273987abf415dc47474683d22aaee9","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"a2f895f3c852063258d62e9f74b081de07ca95df","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.14","status":"affected"},{"version":"0","lessThan":"4.14","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Record truncated, showing 2048 of 2497 characters.
View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"7aea619d9f186dcf0f1289879e9edb69d2b56639","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"b572d0814c1366701ca704286589fab025802566","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"e06e0885725a16304b7723aeb478a78cca9dc96a","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"51eeef1949c11d3dcb5f422a5d9b3f09ebe8a1bc","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"2f390b4c83011452753fd84972f657d2b00a952b","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"ba7b6444097a73ccd3d3ac9e2be4ebb73d226460","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"9743f60013273987abf415dc47474683d22aaee9","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"a2f895f3c852063258d62e9f74b081de07ca95df","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.14","status":"affected"},{"version":"0","lessThan":"4.14","versionType":"semver","status":"unaffected"},{"version":"5.10.265","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.216","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.183","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessTh
CVE Modified by kernel.org
8/18/2026 3:16:50 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"51eeef1949c11d3dcb5f422a5d9b3f09ebe8a1bc","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"2f390b4c83011452753fd84972f657d2b00a952b","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"ba7b6444097a73ccd3d3ac9e2be4ebb73d226460","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"9743f60013273987abf415dc47474683d22aaee9","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"a2f895f3c852063258d62e9f74b081de07ca95df","versionType":"git","status":"affected"},{"version":"0","lessThan":"6.6.148","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.101","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.42","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.6","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"51eeef1949c11d3dcb5f422a5d9b3f09ebe8a1bc","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"2f390b4c83011452753fd84972f657d2b00a952b","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"ba7b6444097a73ccd3d3ac9e2be4ebb73d226460","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"9743f60013273987abf415dc47474683d22aaee9","versionType":"git","status":"affected"},{"version":"53766e5adac75872e9d413cdbfd0e47ae40701f9","lessThan":"a2f895f3c852063258d62e9f74b081de07ca95df","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.14","status":"affected"},{"version":"0","lessThan":"4.14","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
CVE Modified by kernel.org
8/17/2026 1:18:25 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"51eeef1949c11d3dcb5f422a5d9b3f09ebe8a1bc","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"2f390b4c83011452753fd84972f657d2b00a952b","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"ba7b6444097a73ccd3d3ac9e2be4ebb73d226460","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"9743f60013273987abf415dc47474683d22aaee9","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"a2f895f3c852063258d62e9f74b081de07ca95df","versionType":"git","status":"affected"},{"version":"0","lessThan":"6.6.148","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.101","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.42","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.6","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc4","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"51eeef1949c11d3dcb5f422a5d9b3f09ebe8a1bc","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"2f390b4c83011452753fd84972f657d2b00a952b","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"ba7b6444097a73ccd3d3ac9e2be4ebb73d226460","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"9743f60013273987abf415dc47474683d22aaee9","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"a2f895f3c852063258d62e9f74b081de07ca95df","versionType":"git","status":"affected"},{"version":"0","lessThan":"6.6.148","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.101","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.42","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.6","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
New CVE Received from kernel.org
8/10/2026 9:20:11 AM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
amdgpu_bo_create_reserved() only allocates a new BO when
*bo_ptr (struct amdgpu_bo **bo_ptr as input parameter) is
NULL, it simply skips creation when *bo_ptr is non-NULL.
But it unconditionally reserves, pins, gart allocates
and maps the BO afterwards.
When the same non-NULL BO pointer is passed in again,
for example firmware buffers that live in adev and are
re-loaded on every resume / cp_resume / start
under AMDGPU_FW_LOAD_DIRECT, amdgpu_bo_pin() just increases
pin_count unconditionally, however the matching teardown only unpins
once, so pin_count never drops to zero, so TTM is not able
to move, swap or evict a BO, causing BO leaks.
This commit fixes this issue by only pinning the bo
once at creation, and repeated calls no longer
take additional pin references.
(cherry picked from commit 3ddc0ae76202c447b6aec61e907b852bc94671cf)
Added
Reference
https://git.kernel.org/stable/c/2f390b4c83011452753fd84972f657d2b00a952b
Added
Reference
https://git.kernel.org/stable/c/51eeef1949c11d3dcb5f422a5d9b3f09ebe8a1bc
Added
Reference
https://git.kernel.org/stable/c/9743f60013273987abf415dc47474683d22aaee9
Added
Reference
https://git.kernel.org/stable/c/a2f895f3c852063258d62e9f74b081de07ca95df
Added
Reference
https://git.kernel.org/stable/c/ba7b6444097a73ccd3d3ac9e2be4ebb73d226460
Added
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"51eeef1949c11d3dcb5f422a5d9b3f09ebe8a1bc","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"2f390b4c83011452753fd84972f657d2b00a952b","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"ba7b6444097a73ccd3d3ac9e2be4ebb73d226460","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"9743f60013273987abf415dc47474683d22aaee9","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"a2f895f3c852063258d62e9f74b081de07ca95df","versionType":"git","status":"affected"},{"version":"0","lessThan":"6.6.148","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.101","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.42","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.6","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc4","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Quick Info
CVE Dictionary Entry: CVE-2026-68234 NVD
Published Date: 08/10/2026 NVD
Last Modified: 08/19/2026
Source: kernel.org
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
