CVE-2025-68732
Unknown Unknown - Not Provided

Race Condition in Linux Kernel host1x syncpt Allocation

Publication date: 2025-12-24

Last updated on: 2025-12-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking. This ensures no thread can acquire the syncpt_mutex after the refcount drops to zero but before syncpt_release acquires it. This prevents races where syncpoints could be allocated while still being cleaned up from a previous release. Remove explicit mutex locking in syncpt_release as kref_put_mutex() handles this atomically.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-24
Last Modified
2025-12-24
Generated
2026-07-06
AI Q&A
2025-12-24
EPSS Evaluated
2026-07-05
NVD
CVE-2025-68732

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a race condition in the Linux kernel's gpu host1x driver related to synchronization point (syncpt) allocation and freeing. Specifically, there was a race between host1x_syncpt_alloc() and host1x_syncpt_put() functions, which could allow syncpoints to be allocated while they were still being cleaned up from a previous release. The fix involves using kref_put_mutex() to ensure atomic locking and prevent threads from acquiring the syncpt_mutex after the reference count drops to zero but before the syncpt_release function acquires it, thus preventing the race condition.

Impact Analysis

This race condition could lead to improper synchronization point management in the GPU host1x driver, potentially causing system instability, crashes, or unpredictable behavior in GPU operations. It may affect the reliability of GPU resource management and could lead to use-after-free or other concurrency-related issues in the kernel.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-68732. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart