PT-2025-51602 · Linux+2 · Linux Kernel+2

CVE-2025-68189

·

Published

2025-09-23

·

Updated

2026-02-24

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7
Description The Linux kernel contains a flaw within the drm/msm subsystem related to the handling of imported DMA buffers during object freeing. Specifically, the condition checking for the NO SHARE case was insufficient, leading to a potential use-after-free issue. This issue was identified through a system crash report (splat) during IRIS video playback. The vulnerability resides in the msm gem free object function.
Recommendations Update to a newer version of the Linux kernel that addresses this issue.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-371

Related Identifiers

BDU:2026-10707
CVE-2025-68189
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu