CVE-2025-68730
Use-After-Free Vulnerability in Linux Kernel IVPU Accelerator Component
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel involves a flaw in the accel/ivpu component where a page fault occurs in the function ivpu_bo_unbind_all_bos_from_context(). The issue arises because a buffer object (BO) is incorrectly added to the vdev->bo_list during ivpu_gem_create_object(). If drm_gem_shmem_create() fails, the BO is not fully created and the ivpu_gem_bo_free() callback is not called, leaving a deleted BO on the list, which can cause a page fault.
How can this vulnerability impact me? :
This vulnerability can lead to a page fault in the Linux kernel, potentially causing system instability or crashes when the affected function is triggered. It may affect system reliability and could be exploited to disrupt normal operations.