8.8

CVE-2026-68107: linux

CVSS: 8.8v3.1HighReceived
AliasesUBUNTU-CVE-2026-68107DEBIAN-CVE-2026-68107
Published 10-08-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-68107 is a high (CVSS 8.8) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.2% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 22 · Related 20
MGASA-2026-0336MGASA-2026-0337OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23477-1SUSE-SU-2026:23481-1SUSE-SU-2026:23528-1

Timeline

  1. 10-08-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. (cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded) | < 6.8.0-147.147 | < 7.0.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1067.70 | < 7.0.0-1014.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.12.101-1 | < 7.1.6-1
  • linux-6.12< 6.12.101-1~deb12u1
Linux1 product
  • linux≥ cfdde9197ecd957281507be99af172671a57755c, < bbbe6a2a8d8dc87243438d3ffea2083b52d882d9 | ≥ 6dc4eddeb7e6cca7e1ab32cafbda79d06e652d84, < ff6aa542d91d76a185f69bd1997b94a560ff5f6b | ≥ 2b10cb58d7a3fd621ec9b2ba765a092e562ef998, < bd868c077f67589ed2a714307ceaade5f246e302 | ≥ 2b10cb58d7a3fd621ec9b2ba765a092e562ef998, < c309626bf91fa0a0b583575654e6e14e81f818a3 | ≥ 2b10cb58d7a3fd621ec9b2ba765a092e562ef998, < 3b4082fabc67c9780b06eb959e59dd92fa79c0f0 | b1dc92f55b22a80ded8f0263c9ef4ba902303895 | ≥ 6.6.107, < 6.6.148 | ≥ 6.12.48, < 6.12.101 | ≥ 6.16.8, < 6.17 | 6.17

3 vendors · 172 products

References

18 links
Show all 18 references