CVE-2026-68273

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a denial of service (DoS).

This vulnerability is rated as having Moderate impact because exploitation requires local system access on machines equipped with AMD graphics hardware driven by the amdgpu kernel module. An unprivileged local user would need to race concurrent context initialization or sysfs power profile state modifications to trigger the memory corruption. Consequently, systems without AMD GPU hardware or environments where graphics device nodes are restricted to privileged users are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.