Strix
26.1K

CVE-2026-68380

Unknown

Last modified

CVE-2026-68380 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_submit() stores current->mm in job->mm without holding any reference. aie2_sched_job_run() later access job->mm from the DRM scheduler worker thread.

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_submit() stores current->mm in job->mm without holding any reference. aie2_sched_job_run() later access job->mm from the DRM scheduler worker thread. With only a raw pointer and no structural reference, the mm_struct can be freed before the scheduler runs the job. Fix this by calling mmgrab() to hold a structural mm_count reference for the lifetime of the job, paired with mmdrop() in every cleanup path.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= aac243092b707bb3018e951d470cc1a9bcbaba6c, < 6875ee2bef48f5d9f045d81a8a4d68893f768a8a; >= aac243092b707bb3018e951d470cc1a9bcbaba6c, < e8fadbffc19a233d1eedebfb8df0f522d1388280; >= aac243092b707bb3018e951d470cc1a9bcbaba6c, < faebb7ba1ac65fa5810b640df02ce04e509fdc11
LinuxLinux6.14

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68380?
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_submit() stores current->mm in job->mm without holding any reference. aie2_sched_job_run() later access job->mm from the DRM scheduler worker thread. With only a raw pointer and no structural reference, the mm_struct can be freed before the scheduler runs the job. Fix this by calling mmgrab() to hold a structural mm_count reference for the lifetime of the job, paired with mmdrop() in every cleanup path.
How severe is CVE-2026-68380?
Severity scoring for CVE-2026-68380 is pending analysis.
How do I fix CVE-2026-68380?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68380?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST