CVE-2026-68281
kernel: drm/imagination: Count paired job fence as dependency in prepare_job()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel's graphics driver for Imagination GPUs. This vulnerability occurs because the system incorrectly manages dependencies between certain graphics processing tasks. This mismanagement can lead to the system miscalculating available resources, causing tasks to fail or time out. The consequence is system instability, potentially resulting in a Denial of Service (DoS) where the system becomes unresponsive.
Statement
This issue affects systems with Imagination PowerVR GPUs using the drm/imagination driver. Paired geometry and fragment jobs were not counted as scheduler dependencies, so an almost-full command queue could be overrun, causing warnings and possible GPU job timeouts. Systems without PowerVR hardware are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-805 · Buffer Access with Incorrect Length Value