Riskcovery

CVE-2025-68748

drm/panthor: Fix UAF race between device unplug and FW event processing

State
Published
Severity
7.8 High
Published
Dec 24, 2025
Updated
Aug 5, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: Fix UAF race between device unplug and FW event processing

The function panthor_fw_unplug() will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this point. process_fw_events_work() can in this case try to access said freed memory.

Simply call disable_work_sync() to both drain and prevent future invocation of process_fw_events_work().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • de85488138247d034eb3241840424a54d660926b to before 31db188355a49337e3e8ec98b99377e482eab22cAffected
  • de85488138247d034eb3241840424a54d660926b to before 5e3ff56d4cb591daea70786d07dc21d06dc34108Affected
  • de85488138247d034eb3241840424a54d660926b to before 6c1da9ae2c123a9ffda5375e64cc81f9ed3cc04aAffected
  • de85488138247d034eb3241840424a54d660926b to before 7051f6ba968fa69918d72cc26de4d6cf7ea05b90Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.63 through 6.12.*Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.