CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
Published Dec 16, 2025
·Updated
drm, fbcon, vgaswitcheroo: Avoid race condition in fbcon setup
Affected Software
3 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.117.1-1
Microsoft azl3 kernel 6.6.141.1-1<6.6.143.1-1
6.6.143.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1
Event History
Dec 16, 2025
CVE Published
via MITRE·03:06 PM
Data Sourced
via MITRE·03:06 PM
Description
Data Sourced
via NVD·04:16 PM
Description
Dec 18, 2025
Data Sourced
via Microsoft·01:04 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·09:04 AM
DescriptionSeverity
Updated
via Microsoft·09:04 AM
SeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-68296?
The severity of CVE-2025-68296 is classified based on its potential impact on system stability and security.
2
How do I fix CVE-2025-68296?
To fix CVE-2025-68296, you should update to the latest version of the Linux kernel that includes the patch.
3
What software is affected by CVE-2025-68296?
CVE-2025-68296 affects the Linux kernel, specifically components related to framebuffer console handling and vga_switcheroo.
4
What type of vulnerability is CVE-2025-68296?
CVE-2025-68296 is a race condition vulnerability that can lead to out-of-bounds access.
5
When was CVE-2025-68296 resolved?
CVE-2025-68296 was resolved with patches released in recent updates to the Linux kernel.