Answer in brief
CVE-2026-68240 records a Unknown severity vulnerability in drm/gpusvm: publish dpagemap early to avoid device mapping leak on error. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 <e8362523fd1b61712f7d996802f9b5dee545c7e6 || >=f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 <72e4fca5529e45b5beebad79d804de442f632324 || >=f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 <7f708f51e3955bda0d77a0b67ab9bea6c97fea99 | e8362523fd1b61712f7d996802f9b5dee545c7e6, 72e4fca5529e45b5beebad79d804de442f632324, 7f708f51e3955bda0d77a0b67ab9bea6c97fea99 |
| Linux/Linuxgeneric | 6.18 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored the local dpagemap into svm_pages->dpagemap on the success path. If a later page failed (e.g. -EOPNOTSUPP when ctx->allow_mixed is false) and jumped to err_unmap, svm_pages->dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped device_unmap() and leaked the device mappings already created. Assign svm_pages->dpagemap when the first device page is mapped so the err_unmap path can device_unmap() those mappings. This issue was found by Sashiko AI review.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68240 records a Unknown severity vulnerability in drm/gpusvm: publish dpagemap early to avoid device mapping leak on error. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 <e8362523fd1b61712f7d996802f9b5dee545c7e6 || >=f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 <72e4fca5529e45b5beebad79d804de442f632324 || >=f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 <7f708f51e3955bda0d77a0b67ab9bea6c97fea99 | e8362523fd1b61712f7d996802f9b5dee545c7e6, 72e4fca5529e45b5beebad79d804de442f632324, 7f708f51e3955bda0d77a0b67ab9bea6c97fea99 |
| Linux/Linuxgeneric | 6.18 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored the local dpagemap into svm_pages->dpagemap on the success path. If a later page failed (e.g. -EOPNOTSUPP when ctx->allow_mixed is false) and jumped to err_unmap, svm_pages->dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped device_unmap() and leaked the device mappings already created. Assign svm_pages->dpagemap when the first device page is mapped so the err_unmap path can device_unmap() those mappings. This issue was found by Sashiko AI review.
Quoted source text, attributed separately from HOL analysis.