CVE-2025-68749

Summary

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Fix race condition when unbinding BOs

Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BOs list before it gets unmapped. Then file_priv_unbind() triggers a warning in drm_mm_takedown() during context teardown.

Protect the unmapping sequence with bo_list_lock to ensure the BO is always fully unmapped when removed from the list. This ensures the BO is either fully unmapped at context teardown time or present on the list and unmapped by file_priv_unbind().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 < 0328bb097bef05a796217c54b3d651cc3782827caffected
LinuxLinux48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 < fb16493ebd8f171bcf0772262619618a131f30f7affected
LinuxLinux48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 < d71333ffdd3707d84cfb95acfaf8ba892adc066baffected
LinuxLinux48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 < 00812636df370bedf4e44a0c81b86ea96bca8628affected
LinuxLinux6.8affected
LinuxLinux0 < 6.8unaffected
LinuxLinux6.12.68 <= 6.12.*unaffected
LinuxLinux6.17.13 <= 6.17.*unaffected
LinuxLinux6.18.2 <= 6.18.*unaffected
LinuxLinux6.19 <= *unaffected

Weaknesses

References