Riskcovery

CVE-2026-68107

drm/amdgpu/vcn4: avoid rereading IB param length

State
Published
Severity
8.8 High
Published
Aug 10, 2026
Updated
Oct 30, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn4: avoid rereading IB param length

Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB.

This avoids a potential TOCTOU issue if the IB contents change between reads.

(cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HLinux

Weaknesses

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Affected Products

ProductVersions
LinuxLinux
  • cfdde9197ecd957281507be99af172671a57755c to before bbbe6a2a8d8dc87243438d3ffea2083b52d882d9Affected
  • 6dc4eddeb7e6cca7e1ab32cafbda79d06e652d84 to before ff6aa542d91d76a185f69bd1997b94a560ff5f6bAffected
  • 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 to before bd868c077f67589ed2a714307ceaade5f246e302Affected
  • 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 to before c309626bf91fa0a0b583575654e6e14e81f818a3Affected
  • 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 to before 3b4082fabc67c9780b06eb959e59dd92fa79c0f0Affected
  • d19dd814b5b7dd9bfc288308a69cb29528f041fdAffected
  • b1dc92f55b22a80ded8f0263c9ef4ba902303895Affected
  • 6.6.107 to before 6.6.148Affected
  • 6.12.48 to before 6.12.101Affected
  • 6.1.191 to before 6.2Affected
  • 6.16.8 to before 6.17Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.