What’s Vulnerable › Vulnerabilities

CVE-2026-68240: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-10 · updated 2026-10-19
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored the local dpagemap into svm_pages->dpagemap on the success path. If a later page failed (e.g. -EOPNOTSUPP when ctx->allow_mixed is false) and jumped to err_unmap, svm_pages->dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped device_unmap() and leaked the device mappings already created. Assign svm_pages->dpagemap when the first device page is mapped so the err_unmap path can device_unmap() those mappings. This issue was found by Sashiko AI review.

Affected products

• Linux kernel: 6.18 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/72e4fca5529e45b5beebad79d804de442f632324
• https://git.kernel.org/stable/c/7f708f51e3955bda0d77a0b67ab9bea6c97fea99
• https://git.kernel.org/stable/c/e8362523fd1b61712f7d996802f9b5dee545c7e6

Get alerted when CVE-2026-68240 or the next vulnerability affects your stack