Riskcovery

CVE-2025-68730

accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()

State
Published
Severity
7.8 High
Published
Dec 24, 2025
Updated
Oct 21, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()

Don't add BO to the vdev->bo_list in ivpu_gem_create_object(). When failure happens inside drm_gem_shmem_create(), the BO is not fully created and ivpu_gem_bo_free() callback will not be called causing a deleted BO to be left on the list.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8d88e4cdce4f5c56de55174a4d32ea9c06f7fa66 to before 9ad57ebd1249c7bbfe9a07ff5e0176dfa320cd62Affected
  • 8d88e4cdce4f5c56de55174a4d32ea9c06f7fa66 to before 8172838a284c27190fa6782c2740a97020434750Affected
  • 8d88e4cdce4f5c56de55174a4d32ea9c06f7fa66 to before c9ef5ccd8bd9bcf598b6d3f77e7eb4dde7149aecAffected
  • 8d88e4cdce4f5c56de55174a4d32ea9c06f7fa66 to before 8b694b405a84696f1d964f6da7cf9721e68c4714Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.