CVE-2026-68437
kernel: drm/imagination: Fit paired fragment job in the correct CCCB
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 12, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel's PowerVR DRM driver. The driver incorrectly handles paired fragment jobs, leading to an erroneous check for available space in the command buffer. This issue can cause the system to experience kernel warnings and potentially job timeouts, resulting in a Denial of Service (DoS).
Statement
This issue affects Imagination PowerVR GPUs. Paired fragment jobs were checked against the geometry CCCB free space instead of the fragment CCCB, causing command buffer overruns and GPU job failures. Systems without PowerVR hardware are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input