Linux Kernel up to 7.1.5/7.2-rc4 Hvs/V3d vc4_drv.c vc4_hvs_unbind/vc4_v3d_unbind null pointer dereference

Summaryinfo

A vulnerability classified as very critical has been found in Linux Kernel up to 7.1.5/7.2-rc4. This vulnerability affects the function vc4_hvs_unbind/vc4_v3d_unbind of the file drivers/gpu/drm/vc4/vc4_drv.c of the component Hvs/V3d. Performing a manipulation results in null pointer dereference. This vulnerability is reported as CVE-2026-68303. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.1.5/7.2-rc4. This affects the function vc4_hvs_unbind/vc4_v3d_unbind of the file drivers/gpu/drm/vc4/vc4_drv.c of the component Hvs/V3d. The manipulation with an unknown input leads to a null pointer dereference vulnerability. CWE is classifying the issue as CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hvs/v3d: Fix null dereference in unbind The hvs and v3d drivers use dev_get_drvdata(master) in their unbind functions. Since the vc4-drm gets removed before its dependent drivers (vc4_hvs/vc4_v3d) the vc4_hvs_unbind/vc4_v3d_unbind functions try to get drvdata of its master and fails with a null dereference error. Use the data pointer passed to the unbind functions directly instead of dev_get_drvdata(master). This avoids using potentially freed memory.

It is possible to read the advisory at git.kernel.org. This vulnerability is uniquely identified as CVE-2026-68303 since 07/30/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/10/2026).

Upgrading to version 7.1.6 or 7.2-rc5 eliminates this vulnerability. Applying the patch 261f0a3f0ac03248284f5116d3258f89c9642215/7dc3680b7ffe01add3e9299fde8471d2dd53a8ae is able to eliminate this problem.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 7.1.0
• 7.1.1
• 7.1.2
• 7.1.3
• 7.1.4
• 7.1.5
• 7.2-rc1
• 7.2-rc2
• 7.2-rc3
• 7.2-rc4

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion