PT-2026-2525 · Linux+3 · Linux Kernel+3

Published 2025-12-10 · Updated 2026-05-07 · CVE-2025-68793

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:P/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-1289896.2.zuul.bf4f11df81c1410bbe901c4373305a31

Description The Linux kernel contains a flaw in the DRM/amdgpu subsystem related to a use-after-free (UAF) condition during GPU recovery. This issue arises from a race between the sched timeout callback and the tdr work queue, potentially leading to a UAF when accessing the process address space ID (pasid). The vulnerability occurs when the tdr queue frees a job before the timeout callback completes, resulting in an invalid memory access. A KASAN trace is provided as an example of the issue.

Recommendations Update to version 6.16.0-1289896.2.zuul.bf4f11df81c1410bbe901c4373305a31 or later.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-00704

CVE-2025-68793

USN-8177-1

USN-8177-2

USN-8183-1

USN-8183-2

USN-8245-1

USN-8257-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

Amdgpu

References · 168

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68793.json · Exploit
• https://ubuntu.com/security/CVE-2025-71073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71098 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8183-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71131 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71104 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71084 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71102 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8177-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68351 · Vendor Advisory