CVE-2025-68732
Unknown Unknown - Not Provided
Race Condition in Linux Kernel host1x syncpt Allocation

Publication date: 2025-12-24

Last updated on: 2025-12-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking. This ensures no thread can acquire the syncpt_mutex after the refcount drops to zero but before syncpt_release acquires it. This prevents races where syncpoints could be allocated while still being cleaned up from a previous release. Remove explicit mutex locking in syncpt_release as kref_put_mutex() handles this atomically.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-24
Last Modified
2025-12-24
Generated
2026-06-16
AI Q&A
2025-12-24
EPSS Evaluated
2026-06-15
NVD
CVE-2025-68732
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a race condition in the Linux kernel's gpu host1x driver related to synchronization point (syncpt) allocation and freeing. Specifically, there was a race between host1x_syncpt_alloc() and host1x_syncpt_put() functions, which could allow syncpoints to be allocated while they were still being cleaned up from a previous release. The fix involves using kref_put_mutex() to ensure atomic locking and prevent threads from acquiring the syncpt_mutex after the reference count drops to zero but before the syncpt_release function acquires it, thus preventing the race condition.

Impact Analysis

This race condition could lead to improper synchronization point management in the GPU host1x driver, potentially causing system instability, crashes, or unpredictable behavior in GPU operations. It may affect the reliability of GPU resource management and could lead to use-after-free or other concurrency-related issues in the kernel.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-68732. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart