Vulnerability in Linux

CVE-2025-68730

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() Don't add BO to the vdev->bo_list in ivpu_gem_create_object(). When failure happens inside drm_gem_shmem_create(), the BO is not fully created and ivpu_gem_bo_free() callback will not be called causing a deleted BO to be left on the list.

EPSS: 0.002 (5.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 8d88e4cdce4f5c56de55174a4d32ea9c06f7fa66, 6.8, 0

References

Frequently asked questions

What is CVE-2025-68730?
CVE-2025-68730 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-12-24.
How severe is CVE-2025-68730?
High severity. CVSS v3 base score is 7.8 out of 10.