CVE-2025-68749

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-68749

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BOs list before it gets unmapped. Then file_priv_unbind() triggers a warning in drm_mm_takedown() during context teardown. Protect the unmapping sequence with bo_list_lock to ensure the BO is always fully unmapped when removed from the list. This ensures the BO is either fully unmapped at context teardown time or present on the list and unmapped by file_priv_unbind().

References
Link Resource
https://git.kernel.org/stable/c/00812636df370bedf4e44a0c81b86ea96bca8628 Patch
https://git.kernel.org/stable/c/0328bb097bef05a796217c54b3d651cc3782827c Patch
https://git.kernel.org/stable/c/d71333ffdd3707d84cfb95acfaf8ba892adc066b Patch
https://git.kernel.org/stable/c/fb16493ebd8f171bcf0772262619618a131f30f7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Feb 2026, 18:44

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/00812636df370bedf4e44a0c81b86ea96bca8628 - () https://git.kernel.org/stable/c/00812636df370bedf4e44a0c81b86ea96bca8628 - Patch
References () https://git.kernel.org/stable/c/0328bb097bef05a796217c54b3d651cc3782827c - () https://git.kernel.org/stable/c/0328bb097bef05a796217c54b3d651cc3782827c - Patch
References () https://git.kernel.org/stable/c/d71333ffdd3707d84cfb95acfaf8ba892adc066b - () https://git.kernel.org/stable/c/d71333ffdd3707d84cfb95acfaf8ba892adc066b - Patch
References () https://git.kernel.org/stable/c/fb16493ebd8f171bcf0772262619618a131f30f7 - () https://git.kernel.org/stable/c/fb16493ebd8f171bcf0772262619618a131f30f7 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-362

30 Jan 2026, 10:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/0328bb097bef05a796217c54b3d651cc3782827c -

24 Dec 2025, 13:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-24 13:16

Updated : 2026-02-26 18:44

NVD link : CVE-2025-68749

Mitre link : CVE-2025-68749

CVE.ORG link : CVE-2025-68749

JSON object : View

Products Affected

linux

CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')