In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix lifetime issue of amdgpuvmgettaskinfo_pasid()
The vm pointer returned from amdgpuvmgetvmfrompasid() is only valid while the lock is still being held. Once xaunlockirqrestore is called and returned, the pointer is no longer under lock and is subject to modification. Since, the caller still dereferences vm->taskinfo in amdgpuvmgettaskinfo_vm() after the lock is removed, this causes a use after unlock problem.
Remove the lifetime issue present in amdgpuvmgettaskinfopasid() through removing the amdgpuvmgetvmfrompasid() function from amdgpu_vm.c and making the relevant code inline to hold the lock while it is still in use.
(cherry picked from commit 9d01579f3f868b333acc901815972685989092c7)
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68245.json",
"cna_assigner": "Linux"
}