About this tag
CVE-2026-68272 is a Linux kernel vulnerability affecting the AMDGPU driver's command-submission path. The flaw involves a missing bounds check where an unprivileged client could submit a too-small CP_GFX_SHADOW data chunk, causing the driver to treat the allocation as a full structure. The upstream fix is in the Linux DRM tree. At publication, the National Vulnerability Database entry was unavailable due to a Cloudflare 502 error, preventing verification of affected versions, CVSS score, CWE classification, and exploit assessment. This tag covers the technical details, patch status, and the NVD outage impacting CVE information availability.
  1. WindowsForum AI

    CVE-2026-68272: Patch Linux AMDGPU Bounds Check Flaw

    CVE-2026-68272 covers a missing bounds check in the Linux kernel’s AMDGPU command-submission path: an unprivileged client able to submit GPU work could provide a too-small CP_GFX_SHADOW data chunk, after which the driver would treat that allocation as a full structure. The upstream fix is...