CVE-2026-68268

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68268", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.378Z", "datePublished": "2026-08-10T12:01:43.573Z", "dateUpdated": "2026-08-17T05:02:01.400Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:02:01.400Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Return error on non-migratable faults requiring devmem\n\nNon-migratable faults that require devmem incorrectly jump to the 'out'\nlabel, which squashes the error code intended to be returned to the\nupper layers. Fix this by returning -EACCES instead.\n\n(cherry picked from commit c4508edb2c723de93717272488ea65b165637eac)"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/xe/xe_svm.c"], "versions": [{"version": "4208fac3dce52d4328007028ec88dd5d0e78dcf2", "lessThan": "90a8a938e0caecc9ee9dec3eb9eda92d66ba02a3", "status": "affected", "versionType": "git"}, {"version": "4208fac3dce52d4328007028ec88dd5d0e78dcf2", "lessThan": "7445e1b85159baf40d56b9557f344f131f924dd0", "status": "affected", "versionType": "git"}, {"version": "4208fac3dce52d4328007028ec88dd5d0e78dcf2", "lessThan": "136fb61ba8571076dc5d49350a0e6d002d740b74", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/xe/xe_svm.c"], "versions": [{"version": "6.18", "status": "affected"}, {"version": "0", "lessThan": "6.18", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/90a8a938e0caecc9ee9dec3eb9eda92d66ba02a3"}, {"url": "https://git.kernel.org/stable/c/7445e1b85159baf40d56b9557f344f131f924dd0"}, {"url": "https://git.kernel.org/stable/c/136fb61ba8571076dc5d49350a0e6d002d740b74"}], "title": "drm/xe: Return error on non-migratable faults requiring devmem", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/xe/xe_svm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "90a8a938e0caecc9ee9dec3eb9eda92d66ba02a3", "status": "affected", "version": "4208fac3dce52d4328007028ec88dd5d0e78dcf2", "versionType": "git"}, {"lessThan": "7445e1b85159baf40d56b9557f344f131f924dd0", "status": "affected", "version": "4208fac3dce52d4328007028ec88dd5d0e78dcf2", "versionType": "git"}, {"lessThan": "136fb61ba8571076dc5d49350a0e6d002d740b74", "status": "affected", "version": "4208fac3dce52d4328007028ec88dd5d0e78dcf2", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/xe/xe_svm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.18"}, {"lessThan": "6.18", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Return error on non-migratable faults requiring devmem\n\nNon-migratable faults that require devmem incorrectly jump to the 'out'\nlabel, which squashes the error code intended to be returned to the\nupper layers. Fix this by returning -EACCES instead.\n\n(cherry picked from commit c4508edb2c723de93717272488ea65b165637eac)"}], "id": "CVE-2026-68268", "lastModified": "2026-08-17T05:18:29.350", "metrics": {}, "published": "2026-08-10T13:20:15.757", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/136fb61ba8571076dc5d49350a0e6d002d740b74"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7445e1b85159baf40d56b9557f344f131f924dd0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/90a8a938e0caecc9ee9dec3eb9eda92d66ba02a3"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: drm/xe improper error handling may lead to denial of service", "id": "2513265", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513265"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-252", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/xe: Return error on non-migratable faults requiring devmem\nNon-migratable faults that require devmem incorrectly jump to the 'out'\nlabel, which squashes the error code intended to be returned to the\nupper layers. Fix this by returning -EACCES instead.\n(cherry picked from commit c4508edb2c723de93717272488ea65b165637eac)", "A flaw was found in the drm/xe component of the Linux kernel. Non-migratable faults requiring device memory (devmem) incorrectly suppress error codes, preventing them from being returned to higher layers of the system. This improper error handling could lead to unexpected system behavior or resource issues, potentially resulting in a denial of service."], "name": "CVE-2026-68268", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:enterprise_linux_nvidia:", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux for NVIDIA 26"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-08-10T12:01:43Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68268\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68268\nhttps://git.kernel.org/stable/c/136fb61ba8571076dc5d49350a0e6d002d740b74\nhttps://git.kernel.org/stable/c/7445e1b85159baf40d56b9557f344f131f924dd0\nhttps://git.kernel.org/stable/c/90a8a938e0caecc9ee9dec3eb9eda92d66ba02a3"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4208fac3dce52d4328007028ec88dd5d0e78dcf2,90a8a938e0caecc9ee9dec3eb9eda92d66ba02a3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4208fac3dce52d4328007028ec88dd5d0e78dcf2,7445e1b85159baf40d56b9557f344f131f924dd0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4208fac3dce52d4328007028ec88dd5d0e78dcf2,136fb61ba8571076dc5d49350a0e6d002d740b74)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.18"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.18)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T19:15:17.556085+00:00", "updated": "2026-08-13T07:15:12.740871+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}