CVE-2026-68237
Last modified
CVE-2026-68237 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset pre_reset only force-completes fences of MAPPED queues. A queue in any other state (e.g.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset pre_reset only force-completes fences of MAPPED queues. A queue in any other state (e.g. mid-eviction) keeps its last_fence pending; after a GPU reset that fence never signals, so the eviction/suspend worker and process teardown (amdgpu_evf_mgr_flush_suspend) wait on it forever and wedge the machine: INFO: task kworker/6:28 blocked for more than 120 seconds. Workqueue: events amdgpu_eviction_fence_suspend_worker [amdgpu] Call Trace: dma_fence_wait_timeout+0x7e/0x130 amdgpu_userq_evict+0x67/0x140 [amdgpu] amdgpu_eviction_fence_suspend_worker+0xd8/0x160 [amdgpu] process_scheduled_works+0xa6/0x420 Force-complete every queue's fence regardless of state. The unmap and mark-hung step stays gated on MAPPED, since unmapping a queue that is not mapped is invalid. (cherry picked from commit 9102b39fa924dcc3dc75a3137bfa9633c40b88c0)
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 290f46cf5726509f55fac4c7abe9b9d311aa5a3a, < 3085ae8695e025b39d208f288c6265edc75abbe8; >= 290f46cf5726509f55fac4c7abe9b9d311aa5a3a, < 5d75ec2e5f1736c2f10c7d6f4565bf1bf29f29a7 |
| Linux | Linux | 6.19 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-68237?
How severe is CVE-2026-68237?
How do I fix CVE-2026-68237?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-68231In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68232In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68233In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68234In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68235In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68236In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68238In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68239In the Linux kernel, the following vulnerability has been re…
- CVE-2026-6824A stored cross-site scripting (XSS) vulnerability exists in …8.4
- CVE-2026-68240In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68241In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68242In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-68237?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
