Strix
64.9K

CVE-2026-68107

HIGHCVSS 8.8/10EPSS 0.13%

Last modified

CVE-2026-68107 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. (cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a). EPSS estimates a 0.13% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. (cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)

Metrics

CVSS 3.1
8.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Probability
0.13%

2.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= cfdde9197ecd957281507be99af172671a57755c, < bbbe6a2a8d8dc87243438d3ffea2083b52d882d9; >= 6dc4eddeb7e6cca7e1ab32cafbda79d06e652d84, < ff6aa542d91d76a185f69bd1997b94a560ff5f6b; >= 2b10cb58d7a3fd621ec9b2ba765a092e562ef998, < bd868c077f67589ed2a714307ceaade5f246e302; >= 2b10cb58d7a3fd621ec9b2ba765a092e562ef998, < c309626bf91fa0a0b583575654e6e14e81f818a3; >= 2b10cb58d7a3fd621ec9b2ba765a092e562ef998, < 3b4082fabc67c9780b06eb959e59dd92fa79c0f0; b1dc92f55b22a80ded8f0263c9ef4ba902303895; >= 6.6.107, < 6.6.148; >= 6.12.48, < 6.12.101; >= 6.16.8, < 6.17
LinuxLinux6.17

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68107?
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. (cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)
How severe is CVE-2026-68107?
CVE-2026-68107 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.13% probability of exploitation in the next 30 days.
How do I fix CVE-2026-68107?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68107?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST