linux-azure

linux-aws-hwe

linux-gcp

linux-hwe

linux-hwe-edge

linux-oracle

linux

linux-aws

linux-aws-5.0

linux-aws-5.3

linux-aws-5.4

linux-azure-4.15

linux-azure-5.3

linux-azure-5.4

linux-azure-edge

linux-gcp-4.15

linux-gcp-5.3

linux-gcp-5.4

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe-5.4

linux-ibm-5.4

linux-kvm

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-oracle-5.4

linux-raspi-5.4

linux-aws-fips

linux-azure-fips

linux-fips

linux-gcp-fips

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-azure-fde-5.15

linux-bluefield

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-iot

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

linux-xilinx-zynqmp

A vulnerability in the Linux kernel's drm/vc4 subsystem allowed shader buffer object (BO) mappings to become writable after validation, enabling userspace to modify GPU shader code post-validation. This flaw was fixed by clearing the VM_MAYWRITE flag on read-only mappings to prevent writable upgrades. The issue affects multiple Linux Azure kernel versions prior to specific fixed releases.

CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable in Linux kernel

A vulnerability in the Linux kernel's drm/vc4 driver allowed validated shader buffer objects (BOs) to be mapped writable by userspace, bypassing the shader validation process. This was due to the function vc4_gem_object_mmap() rejecting writable mappings but leaving the VM_MAYWRITE flag set, enabling userspace to escalate a read-only mapping to writable via mprotect(). The issue has been fixed by clearing VM_MAYWRITE on the read-only path to prevent writable upgrades. This vulnerability affects specific linux-azure kernel versions and has a high severity rating with a CVSS score of 7.8. A patch is available and has been released by the vendor.

Search: CVE-2026-68445