Riskcovery

CVE-2025-68749

accel/ivpu: Fix race condition when unbinding BOs

State
Published
Severity
7.8 High
Published
Dec 24, 2025
Updated
Aug 5, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Fix race condition when unbinding BOs

Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BOs list before it gets unmapped. Then file_priv_unbind() triggers a warning in drm_mm_takedown() during context teardown.

Protect the unmapping sequence with bo_list_lock to ensure the BO is always fully unmapped when removed from the list. This ensures the BO is either fully unmapped at context teardown time or present on the list and unmapped by file_priv_unbind().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 to before 0328bb097bef05a796217c54b3d651cc3782827cAffected
  • 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 to before fb16493ebd8f171bcf0772262619618a131f30f7Affected
  • 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 to before d71333ffdd3707d84cfb95acfaf8ba892adc066bAffected
  • 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 to before 00812636df370bedf4e44a0c81b86ea96bca8628Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.68 through 6.12.*Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.