In the Linux kernel, the following vulnerability has been resolved:

gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings

__host1x_bo_unpin() drops the last reference to the mapping and frees
it, so we can't dereference mapping afterwards. The cache itself
outlives the mapping, so use the cache local variable instead.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < abeff53233b984571b87582bb588b4b38ef4ea50
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 5b7e5f84d3d4cea10c3764d2da274810a7934228
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 5f4de3c717d34a24d555af581947742980778c02
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < b773faa32b0a98c3eb2b50d96de631681e5d1157
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 266cddf7bd0f6c79b6c0633aef742a22bf70265b
0 affected < 6.6.148
0 affected < 6.12.101
0 affected < 6.18.42
0 affected < 7.1.6
Linux Linux affected
Version Status Constraints
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/266cddf7bd0f6c79b6c0633aef742a22bf70265b cve-icon
https://git.kernel.org/stable/c/5b7e5f84d3d4cea10c3764d2da274810a7934228 cve-icon
https://git.kernel.org/stable/c/5f4de3c717d34a24d555af581947742980778c02 cve-icon
https://git.kernel.org/stable/c/abeff53233b984571b87582bb588b4b38ef4ea50 cve-icon
https://git.kernel.org/stable/c/b773faa32b0a98c3eb2b50d96de631681e5d1157 cve-icon
History

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __host1x_bo_unpin() drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cache local variable instead.
Title gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:04:47.915Z

Reserved: 2026-07-30T09:28:09.392Z

Link: CVE-2026-68427

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.