PT-2026-2525 · Linux+3 · Linux Kernel+3
CVE-2025-68793
·
Published
2025-12-10
·
Updated
2026-05-07
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.16.0-1289896.2.zuul.bf4f11df81c1410bbe901c4373305a31
Description
The Linux kernel contains a flaw in the DRM/amdgpu subsystem related to a use-after-free (UAF) condition during GPU recovery. This issue arises from a race between the sched timeout callback and the tdr work queue, potentially leading to a UAF when accessing the process address space ID (pasid). The vulnerability occurs when the tdr queue frees a job before the timeout callback completes, resulting in an invalid memory access. A KASAN trace is provided as an example of the issue.
Recommendations
Update to version 6.16.0-1289896.2.zuul.bf4f11df81c1410bbe901c4373305a31 or later.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu
Amdgpu