CVE-2025-68732

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition existed between the host1x syncpt alloc() and host1x syncpt put() functions. The issue was addressed by utilizing kref put mutex() instead of kref put() combined with manual mutex locking. This prevents a scenario where a thread could acquire the syncpt mutex after the reference count reaches zero, but before syncpt release acquires it, potentially leading to syncpoints being allocated during cleanup from a previous release. Explicit mutex locking in syncpt release was removed as kref put mutex() handles this atomically.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.