CVE-2026-68271
kernel: drm/nouveau: fix reversed error cleanup order in ucopy functions
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel's drm/nouveau module. An issue with the error cleanup order in ucopy functions can lead to incorrect memory deallocation. This can result in a system crash, also known as a kernel oops, or a memory leak, potentially causing a denial of service.
Statement
This issue affects NVIDIA nouveau GPUs. ucopy error paths free resources in allocation order instead of reverse order, causing double-free. Systems without nouveau are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference