CVE-2025-68749CWE-362

CVE-2025-68749

High · published December 24, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Fix race condition when unbinding BOs

Fix 'Memory manager not clean during takedown' warning that occurs

when ivpu_gem_bo_free() removes the BO from the BOs list before it

gets unmapped. Then file_priv_unbind() triggers a warning in

drm_mm_takedown() during context teardown.

Protect the unmapping sequence with bo_list_lock to ensure the BO is

always fully unmapped when removed from the list. This ensures the BO

is either fully unmapped at context teardown time or present on the

list and unmapped by file_priv_unbind().

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00107 · 1.1th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-12-24T18:16Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.12.686.12.68
linux/linux_kernel≥ 6.13, < 6.17.136.17.13
linux/linux_kernel≥ 6.18, < 6.18.26.18.2
References (4)
EPSS history
Timeline
  • 24 DEC 12:09Z
    accel/ivpu: Fix race condition when unbinding BOs
    cvelistv5