CVE-2026-68239
kernel: drm/ttm: Account for NULL and handle pages in ttm_pool_backup
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's Direct Rendering Manager (drm/ttm) component. A local attacker could trigger a null pointer dereference by manipulating memory pages in ttm_pool_backup. This vulnerability occurs because the system attempts to process or free memory pages that are either empty (NULL) or invalid handles, leading to a kernel crash and a denial of service for the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference