CVE-2025-68732

CVE-2025-68732

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gpu: host1x: Fix race in syncpt alloc/free

Fix race condition between host1x_syncpt_alloc()

and host1x_syncpt_put() by using kref_put_mutex()

instead of kref_put() + manual mutex locking.

This ensures no thread can acquire the

syncpt_mutex after the refcount drops to zero

but before syncpt_release acquires it.

This prevents races where syncpoints could

be allocated while still being cleaned up

from a previous release.

Remove explicit mutex locking in syncpt_release

as kref_put_mutex() handles this atomically.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Published
2025-12-24T16:16Z
References (7)
EPSS history
Timeline
  • 24 DEC 10:33Z
    gpu: host1x: Fix race in syncpt alloc/free
    cvelistv5