PT-2025-51616 · Amd+2 · Amdgpu+2

Published 2025-12-16 · Updated 2026-04-20 · CVE-2025-68203

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the drm/amdgpu subsystem related to inconsistent spinlock usage between interrupt and process contexts within the userq fence driver. Specifically, the amdgpu userq fence driver process() function could experience a deadlock when called from both interrupt and process contexts due to improper interrupt handling during spinlock acquisition. This inconsistency could lead to kernel warnings indicating incorrect locking states. The fix involves using spin lock irqsave() and spin unlock irqrestore() to correctly manage interrupt states regardless of the calling context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-68203

ECHO-8835-2681-4829

Affected Products

Debian

Linux Kernel

Amdgpu

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68203.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2025-68203 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-68203 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-68203 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68203 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2025-68203 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-68203 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68203 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-68203 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-68203 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68203 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/spendergrsec/status/2007161472036811101 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2025-68203 · Note
• https://git.kernel.org/stable/c/1ad70a06d7e91c378b346a3718c81abb50a74b74 · Note