CVE-2026-68261

A flaw was found in the Linux kernel's drm/imagination component. A local user could exploit this vulnerability by passing an invalid virtual machine (VM) context handle to the DRM_IOCTL_PVR_CREATE_CONTEXT ioctl. This improper error checking can lead to a kernel crash, resulting in a Denial of Service (DoS) for the affected system.

This issue affects systems with Imagination PowerVR GPUs. pvr_vm_context_lookup() returns NULL on invalid handles but was checked with IS_ERR(), so passing an invalid VM context handle to DRM_IOCTL_PVR_CREATE_CONTEXT causes NULL dereference. Systems without PowerVR hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.