Vulnerability in Linux

CVE-2025-68747

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If the MMU is down, panthor_vm_unmap_range() might return an error. We expect the page table to be updated still, and if the MMU is blocked, the rest of the GPU should be blocked too, so no risk of accessing physical memory returned to the system (which the current code doesn't cover for anyway). Proceed with the rest of the cleanup instead of bailing out and leaving the va_node inserted in the drm_mm, which leads to UAF when other adjacent nodes are removed from the drm_mm tree.

EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 8a1cc07578bf42d85f008316873d710ff684dd29, 6.10, 0

References

Frequently asked questions

What is CVE-2025-68747?
CVE-2025-68747 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-12-24.
How severe is CVE-2025-68747?
High severity. CVSS v3 base score is 7.8 out of 10.