CVE-2025-68793 Linux CVE debrief

Who should care

Linux kernel maintainers, users, and administrators of systems utilizing the drm/amdgpu component should assess their exposure and prioritize verification of affected systems. Linux users and administrators must verify system configurations and assess exposure, particularly for systems utilizing the drm/amdgpu component.

Why it matters

CVE-2025-68793 is a use-after-free vulnerability in the Linux kernel's drm/amdgpu component. Linux kernel maintainers and users should assess exposure, verify affected systems, and apply patches to prevent potential system instability.

• Verification of affected Linux kernel versions and configurations is necessary to determine exposure.
• Potential use-after-free when accessing the job's pasid during GPU recovery could lead to system instability or crashes.
• Applying the provided commits is crucial to prevent potential use-after-free issues.
• Further monitoring of Linux kernel updates is recommended for additional information and potential patches.

Technical summary

The vulnerability exists in the Linux kernel's drm/amdgpu component, where a race condition between the sched timeout callback and the tdr work queue can lead to a use-after-free when accessing the job's pasid during GPU recovery. The issue arises during GPU recovery when a race condition occurs between the sched timeout callback and the tdr work queue, potentially leading to a use-after-free when accessing the job's pasid. This vulnerability has been resolved with commits dac58c012c47cadf337a35eb05d44498c43e5cd0 and 77f73253015cbc7893fca1821ac3eae9eb4bc943. The gpu recovery function calls drm_sched_stop() and later drm_sched_start(). drm_sched_start() restarts the tdr queue which will eventually free the job.

Defensive priority

Linux kernel maintainers and users should assess exposure and prioritize verification of affected systems, especially those utilizing the drm/amdgpu component.

Recommended defensive actions

• Review and apply the provided commits (dac58c012c47cadf337a35eb05d44498c43e5cd0 and 77f73253015cbc7893fca1821ac3eae9eb4bc943) to ensure the fix is implemented.
• Verify system configurations and assess exposure, particularly for systems utilizing the drm/amdgpu component.
• Monitor Linux kernel updates for further information and potential patches.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE Program record and NVD vulnerability detail provide official information about the vulnerability. Supplemental sources include kernel.org references. The vulnerability exists in the Linux kernel's drm/amdgpu component, where a race condition between the sched timeout callback and the tdr work queue can lead to a use-after-free when accessing the job's pasid during GPU recovery. The issue has been addressed with specific commits (dac58c012c47cadf337a35eb05d44498c43e5cd0 and 77f73253015cbc7893fca1821ac3eae9eb4bc943). Linux users

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.