CVE-2026-68104

drm/amdgpu: invoke pm_genpd_remove() before freeing genpd

State: Published
Severity: 7.8 High
Published: Aug 10, 2026
Updated: Oct 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: invoke pm_genpd_remove() before freeing genpd

Call pm_genpd_remove() to unregister from global list prior to releasing acp_genpd memory, and clear the pointer after free.

(cherry picked from commit cd8650d7a91ee8b768e202354672553faa5cc1f2)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	25030321ba2860c56651429a4f28d94a6483d952 to before 4d7c10b0bf09d90c81818752decbdb1966b62702Affected 25030321ba2860c56651429a4f28d94a6483d952 to before 493adf29d66f23888f0e29888b6bc9512acd0825Affected 25030321ba2860c56651429a4f28d94a6483d952 to before 2e406b86144c1f732eb344f1f1e09043856cfc33Affected 25030321ba2860c56651429a4f28d94a6483d952 to before bdfc7f1e0900ef1361b828c4f69b72701f8a0a86Affected 25030321ba2860c56651429a4f28d94a6483d952 to before 5c0a82283271759fff445ac27182072f200a888cAffected 25030321ba2860c56651429a4f28d94a6483d952 to before 08fee493e0261f9e4120a5c8e7e42e8a723574e8Affected 25030321ba2860c56651429a4f28d94a6483d952 to before 930a5dc3df4aa5e10393134bd5313d616dbebaf6Affected 25030321ba2860c56651429a4f28d94a6483d952 to before 28c9b3c5dc35cc790d11e26ca3fc6e068be63998Affected
LinuxLinux	4.6Affected before 4.6Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

25030321ba2860c56651429a4f28d94a6483d952 to before 4d7c10b0bf09d90c81818752decbdb1966b62702Affected
25030321ba2860c56651429a4f28d94a6483d952 to before 493adf29d66f23888f0e29888b6bc9512acd0825Affected
25030321ba2860c56651429a4f28d94a6483d952 to before 2e406b86144c1f732eb344f1f1e09043856cfc33Affected
25030321ba2860c56651429a4f28d94a6483d952 to before bdfc7f1e0900ef1361b828c4f69b72701f8a0a86Affected
25030321ba2860c56651429a4f28d94a6483d952 to before 5c0a82283271759fff445ac27182072f200a888cAffected
25030321ba2860c56651429a4f28d94a6483d952 to before 08fee493e0261f9e4120a5c8e7e42e8a723574e8Affected
25030321ba2860c56651429a4f28d94a6483d952 to before 930a5dc3df4aa5e10393134bd5313d616dbebaf6Affected
25030321ba2860c56651429a4f28d94a6483d952 to before 28c9b3c5dc35cc790d11e26ca3fc6e068be63998Affected

LinuxLinux

4.6Affected
before 4.6Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.