In the Linux kernel, the following vulnerability has been resolved:
gpu: host1x: Fix use-after-free in host1xboclearcachedmappings
__host1xbounpin() drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cache local variable instead.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68427.json"
}