Vulnerability in Linux

CVE-2025-68207

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbind Cancel and wait for any Dead CT worker to complete before continuing with device unbinding. Else the worker will end up using resources freed by the undind operation. (cherry picked from commit 492671339114e376aaa38626d637a2751cdef263)

EPSS: 0.002 (6.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 6.17.9, 6.12.59, 6.13

References

Frequently asked questions

What is CVE-2025-68207?
CVE-2025-68207 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-12-16.
How severe is CVE-2025-68207?
High severity. CVSS v3 base score is 7.8 out of 10.