Strix
64.8K

CVE-2026-68427

HIGHCVSS 7.8/10EPSS 0.13%

Last modified

CVE-2026-68427 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __host1x_bo_unpin() drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cache local variable instead.. EPSS estimates a 0.13% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __host1x_bo_unpin() drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cache local variable instead.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.13%

2.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= af755456299d44e4ed6af3b7c70a7f03ea37fdf1, < 86a9bd8c8f422d5f3079da31e151868902fcc702; >= 71c017b3f83ff72638f2a1b1d6d4e7bc61d30231, < abeff53233b984571b87582bb588b4b38ef4ea50; >= 0e9dd7cfb9986b78cc81eca126ccfbf57f4c0602, < 5b7e5f84d3d4cea10c3764d2da274810a7934228; >= 8c0d3cf0d5108c96317e0eca92b60dd368867cef, < 5f4de3c717d34a24d555af581947742980778c02; >= df63c76f9c8d881ca7bce1aecfba512328d0527d, < b773faa32b0a98c3eb2b50d96de631681e5d1157; >= 3cbf5e3c46e66d9b3b6b91099bb720c6cb1be3bc, < 266cddf7bd0f6c79b6c0633aef742a22bf70265b
LinuxLinux>= 6.1.178, < 6.1.183; >= 6.6.145, < 6.6.148; >= 6.12.97, < 6.12.101; >= 6.18.40, < 6.18.42; >= 7.1.5, < 7.1.6

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68427?
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __host1x_bo_unpin() drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cache local variable instead.
How severe is CVE-2026-68427?
CVE-2026-68427 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.13% probability of exploitation in the next 30 days.
How do I fix CVE-2026-68427?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68427?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST