CVE-2026-68245

A flaw was found in the drm/amdgpu component of the Linux kernel. A use-after-unlock vulnerability exists where a virtual machine (VM) pointer is dereferenced after its protective lock has been released. This allows the pointer to be modified, potentially leading to memory corruption. An attacker could exploit this to cause a denial of service or achieve privilege escalation.

This vulnerability is evaluated as having Moderate severity for Red Hat Enterprise Linux because exploitation requires local unprivileged access on a host equipped with AMD graphics hardware, along with winning a narrow race condition. Systems that do not contain AMD GPU devices or do not load the amdgpu driver are unaffected by this flaw. While concurrent access could lead to memory corruption or local privilege escalation, the required prerequisites and timing constraints constrain practical exploitability in typical enterprise deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.