AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68303

UNKNOWN · CVSS N/A EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability affects the hvs and v3d drivers in the Linux kernel, where a null dereference occurs during the unbind process due to the improper handling of device data pointers. This can lead to system instability or crashes when the vc4-drm is removed before its dependent drivers. Linux system administrators and developers utilizing these drivers should prioritize applying the fix to prevent potential disruptions in service.

CVE
CVE-2026-68303
Severity
UNKNOWN
CVSS
N/A
EPSS
0.19%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hvs/v3d: Fix null dereference in unbind The hvs and v3d drivers use dev_get_drvdata(master) in their unbind functions. Since the vc4-drm gets removed before its dependent drivers (vc4_hvs/vc4_v3d) the vc4_hvs_unbind/vc4_v3d_unbind functions try to get drvdata of its master and fails with a null dereference error. Use the data pointer passed to the unbind functions directly instead of dev_get_drvdata(master). This avoids using potentially freed memory.