{"id":"CVE-2026-68303","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hvs/v3d: Fix null dereference in unbind\n\nThe hvs and v3d drivers use dev_get_drvdata(master) in their unbind\nfunctions","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hvs/v3d: Fix null dereference in unbind\n\nThe hvs and v3d drivers use dev_get_drvdata(master) in their unbind\nfunctions. Since the vc4-drm gets removed before i…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= c8b75bca92cbf064b9fa125fc74a85994452e935 < 8f62aae059e06746a18a00af27179c3c0f17f4c7","Linux >= c8b75bca92cbf064b9fa125fc74a85994452e935 < 708688ec31ac6b35103ba364dc300a09930079d4","Linux >= c8b75bca92cbf064b9fa125fc74a85994452e935 < 261f0a3f0ac03248284f5116d3258f89c9642215","Linux >= c8b75bca92cbf064b9fa125fc74a85994452e935 < 7dc3680b7ffe01add3e9299fde8471d2dd53a8ae","Linux 4.4"],"published":"2026-08-10","updated":"2026-09-21","sourceUpdated":"2026-09-21T14:17:16.733","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-68303","references":[{"url":"https://git.kernel.org/stable/c/261f0a3f0ac03248284f5116d3258f89c9642215","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/708688ec31ac6b35103ba364dc300a09930079d4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7dc3680b7ffe01add3e9299fde8471d2dd53a8ae","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8f62aae059e06746a18a00af27179c3c0f17f4c7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00189,"epssPercentile":0.08787,"ingestedAt":"2026-09-21T13:37:22.844Z","slug":"CVE-2026-68303","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hvs/v3d: Fix null dereference in unbind\n\nThe hvs and v3d drivers use dev_get_drvdata(master) in their unbind\nfunctions. Since the vc4-drm gets removed before its dependent drivers\n(vc4_hvs/vc4_v3d) the vc4_hvs_unbind/vc4_v3d_unbind functions try to\nget drvdata of its master and fails with a null dereference error.\n\nUse the data pointer passed to the unbind functions directly instead of\ndev_get_drvdata(master). This avoids using potentially freed memory.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}