CVE-2026-68107 (GCVE-0-2026-68107)

Vulnerability from cvelistv5 – Published: 2026-08-10 11:58 – Updated: 2026-08-17 04:58
VLAI
Title
drm/amdgpu/vcn4: avoid rereading IB param length
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. (cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)
Severity
8.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: cfdde9197ecd957281507be99af172671a57755c , < bbbe6a2a8d8dc87243438d3ffea2083b52d882d9 (git)
Affected: 6dc4eddeb7e6cca7e1ab32cafbda79d06e652d84 , < ff6aa542d91d76a185f69bd1997b94a560ff5f6b (git)
Affected: 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 , < bd868c077f67589ed2a714307ceaade5f246e302 (git)
Affected: 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 , < c309626bf91fa0a0b583575654e6e14e81f818a3 (git)
Affected: 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 , < 3b4082fabc67c9780b06eb959e59dd92fa79c0f0 (git)
Affected: b1dc92f55b22a80ded8f0263c9ef4ba902303895 (git)
Affected: 6.6.107 , < 6.6.148 (semver)
Affected: 6.12.48 , < 6.12.101 (semver)
Affected: 6.16.8 , < 6.17 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.17
Unaffected: 0 , < 6.17 (semver)
Unaffected: 6.6.148 , ≤ 6.6.* (semver)
Unaffected: 6.12.101 , ≤ 6.12.* (semver)
Unaffected: 6.18.42 , ≤ 6.18.* (semver)
Unaffected: 7.1.6 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "bbbe6a2a8d8dc87243438d3ffea2083b52d882d9",
              "status": "affected",
              "version": "cfdde9197ecd957281507be99af172671a57755c",
              "versionType": "git"
            },
            {
              "lessThan": "ff6aa542d91d76a185f69bd1997b94a560ff5f6b",
              "status": "affected",
              "version": "6dc4eddeb7e6cca7e1ab32cafbda79d06e652d84",
              "versionType": "git"
            },
            {
              "lessThan": "bd868c077f67589ed2a714307ceaade5f246e302",
              "status": "affected",
              "version": "2b10cb58d7a3fd621ec9b2ba765a092e562ef998",
              "versionType": "git"
            },
            {
              "lessThan": "c309626bf91fa0a0b583575654e6e14e81f818a3",
              "status": "affected",
              "version": "2b10cb58d7a3fd621ec9b2ba765a092e562ef998",
              "versionType": "git"
            },
            {
              "lessThan": "3b4082fabc67c9780b06eb959e59dd92fa79c0f0",
              "status": "affected",
              "version": "2b10cb58d7a3fd621ec9b2ba765a092e562ef998",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b1dc92f55b22a80ded8f0263c9ef4ba902303895",
              "versionType": "git"
            },
            {
              "lessThan": "6.6.148",
              "status": "affected",
              "version": "6.6.107",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.101",
              "status": "affected",
              "version": "6.12.48",
              "versionType": "semver"
            },
            {
              "lessThan": "6.17",
              "status": "affected",
              "version": "6.16.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.17"
            },
            {
              "lessThan": "6.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.101",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.148",
                  "versionStartIncluding": "6.6.107",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.101",
                  "versionStartIncluding": "6.12.48",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.42",
                  "versionStartIncluding": "6.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.6",
                  "versionStartIncluding": "6.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.16.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn4: avoid rereading IB param length\n\nReuse the parameter length returned by\nvcn_v4_0_enc_find_ib_param() instead of rereading it from\nthe IB.\n\nThis avoids a potential TOCTOU issue if the IB contents\nchange between reads.\n\n(cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The flaw is only reachable through the local AMDGPU_CS DRM ioctl on /dev/dri/renderD* (amdgpu_cs_ioctl \u2192 amdgpu_cs_patch_jobs \u2192 amdgpu_cs_patch_ibs), which kmaps the user IB and calls vcn_v4_0_ring_patch_cs_in_place(); no network or physical-device path exists.\nAC:L - patch_cs_in_place reads IB contents directly from attacker-mapped GEM memory without copying; a concurrent thread can change the param-length dword between vcn_v4_0_enc_find_ib_param()\u0027s initial read and the later idx+=amdgpu_ib_get_value(ib,idx)/4, so the attacker controls both sides of the TOCTOU race.\nPR:L - AMDGPU_CS is registered with DRM_AUTH|DRM_RENDER_ALLOW, so any local user who can open the AMDGPU render node (typical render/video group on desktops, gaming handhelds, and GPU cloud instances) can submit VCN4 command buffers without root or init-namespace capabilities.\nUI:N - Exploitation requires only the attacker submitting crafted VCN encode IBs through their own DRM context; no separate victim action such as opening a file, mounting a filesystem, or interacting with malicious content is needed.\nS:C - On VFIO GPU-passthrough and cloud ML hosts, a malicious VM guest submits VCN command streams through the assigned AMD GPU to corrupt host amdgpu kernel state, crossing the guest-to-hypervisor security boundary analogous to a device-model escape.\nC:H - Racing the length dword smaller under-advances IB iteration so nested RADEON_VCN_ENGINE_INFO entries inside a parent package are reached; vcn_v4_0_dec_msg() then reads user-mapped message buffers without snapshotting, enabling TOCTOU check/use mismatches on length/offset fields and out-of-bounds kernel reads past validated bounds.\nI:H - The same nested-entry bypass plus unsnapshotted dec_msg parsing lets userspace rewrite offset/size after kernel validation, driving out-of-bounds accesses in the message loop; skipping vcn_v4_0_limit_sched() via mis-iteration also leaves scheduler/BO state inconsistently modified in attacker-influenceable ways.\nA:H - Racing the length field to zero on re-read makes idx+=0 and re-enters the same ENGINE_INFO entry indefinitely, soft-locking the CS ioctl path; vcn_v4_0_limit_sched() may also block in dma_fence_wait(), yielding repeatable kernel denial-of-service on shared GPU hosts."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T04:58:56.350Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/bbbe6a2a8d8dc87243438d3ffea2083b52d882d9"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff6aa542d91d76a185f69bd1997b94a560ff5f6b"
        },
        {
          "url": "https://git.kernel.org/stable/c/bd868c077f67589ed2a714307ceaade5f246e302"
        },
        {
          "url": "https://git.kernel.org/stable/c/c309626bf91fa0a0b583575654e6e14e81f818a3"
        },
        {
          "url": "https://git.kernel.org/stable/c/3b4082fabc67c9780b06eb959e59dd92fa79c0f0"
        }
      ],
      "title": "drm/amdgpu/vcn4: avoid rereading IB param length",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-68107",
    "datePublished": "2026-08-10T11:58:24.135Z",
    "dateReserved": "2026-07-30T09:28:09.368Z",
    "dateUpdated": "2026-08-17T04:58:56.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-68107",
      "date": "2026-09-21",
      "epss": "0.00128",
      "percentile": "0.02852"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "bbbe6a2a8d8dc87243438d3ffea2083b52d882d9",
                    "status": "affected",
                    "version": "cfdde9197ecd957281507be99af172671a57755c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "ff6aa542d91d76a185f69bd1997b94a560ff5f6b",
                    "status": "affected",
                    "version": "6dc4eddeb7e6cca7e1ab32cafbda79d06e652d84",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "bd868c077f67589ed2a714307ceaade5f246e302",
                    "status": "affected",
                    "version": "2b10cb58d7a3fd621ec9b2ba765a092e562ef998",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c309626bf91fa0a0b583575654e6e14e81f818a3",
                    "status": "affected",
                    "version": "2b10cb58d7a3fd621ec9b2ba765a092e562ef998",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "3b4082fabc67c9780b06eb959e59dd92fa79c0f0",
                    "status": "affected",
                    "version": "2b10cb58d7a3fd621ec9b2ba765a092e562ef998",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "b1dc92f55b22a80ded8f0263c9ef4ba902303895",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6.6.148",
                    "status": "affected",
                    "version": "6.6.107",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.12.101",
                    "status": "affected",
                    "version": "6.12.48",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.17",
                    "status": "affected",
                    "version": "6.16.8",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.17"
                  },
                  {
                    "lessThan": "6.17",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.148",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.101",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.42",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.6",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn4: avoid rereading IB param length\n\nReuse the parameter length returned by\nvcn_v4_0_enc_find_ib_param() instead of rereading it from\nthe IB.\n\nThis avoids a potential TOCTOU issue if the IB contents\nchange between reads.\n\n(cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)"
          }
        ],
        "id": "CVE-2026-68107",
        "lastModified": "2026-08-17T05:18:10.103",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.0,
              "impactScore": 6.0,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-10T13:19:55.477",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/3b4082fabc67c9780b06eb959e59dd92fa79c0f0"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/bbbe6a2a8d8dc87243438d3ffea2083b52d882d9"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/bd868c077f67589ed2a714307ceaade5f246e302"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c309626bf91fa0a0b583575654e6e14e81f818a3"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/ff6aa542d91d76a185f69bd1997b94a560ff5f6b"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-31T11:15:59+00:00",
      "cve": "CVE-2026-68107",
      "id": "CVE-2026-68107",
      "initial_release_date": "2026-08-10T00:00:00+00:00",
      "product_status:known_affected": "275",
      "product_status:known_not_affected": "2",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/amdgpu/vcn4: avoid rereading IB param length",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68107.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-09-18T00:36:01Z",
      "cve": "CVE-2026-68107",
      "id": "CVE-2026-68107",
      "initial_release_date": "2026-08-13T16:24:32Z",
      "product_status:known_affected": "436",
      "product_status:known_not_affected": "312",
      "product_status:recommended": "107",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-68107",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68107.json",
      "version": "8"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.