CVE-2026-68427

CVE-2026-68427 affects the Linux kernel’s gpu: host1x component. The vulnerability arises in __host1x_bo_unpin(), which dereferences a memory mapping after it has been freed, causing a use-after-free. The cache outlives the mapping, so the correct approach is to reference the cache object instead...