CVE-2026-68303

A flaw was found in the Linux kernel's drm/vc4 drivers, specifically in the hvs and v3d components. When these drivers are being removed, they attempt to access memory that has already been freed. This occurs because they try to retrieve driver data from a master device that is no longer available, leading to a null pointer dereference. A local attacker could potentially exploit this vulnerability to cause system instability or a denial of service (DoS).

This vulnerability is rated as having a Low impact because triggering the condition requires local access during driver teardown, and the affected Broadcom VideoCore graphic components are not included in Red Hat Enterprise Linux. In typical enterprise deployments, supported hardware architectures do not utilize the vc4 display subsystem. Consequently, standard Red Hat kernel builds are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.