PT-2025-51602 · Linux+2 · Linux Kernel+2

Published 2025-12-16 · Updated 2026-02-24 · CVE-2025-68189

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7

Description The Linux kernel contains a flaw within the drm/msm subsystem related to the handling of imported DMA buffers during object freeing. Specifically, the condition checking for the NO SHARE case was insufficient, leading to a potential use-after-free issue. This issue was identified through a system crash report (splat) during IRIS video playback. The vulnerability resides in the msm gem free object function.

Recommendations Update to a newer version of the Linux kernel that addresses this issue.

Exploit

Related Identifiers

CVE-2025-68189

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 390

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68189.json · Exploit
• https://ubuntu.com/security/CVE-2025-40054 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40168 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40173 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40181 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40048 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68315 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68199 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40061 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40330 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40295 · Vendor Advisory