CVE-2025-68730: accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Fix page fault in ivpubounbindallbosfromcontext()
Don't add BO to the vdev->bolist in ivpugemcreateobject(). When failure happens inside drmgemshmemcreate(), the BO is not fully created and ivpugembofree() callback will not be called causing a deleted BO to be left on the list.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In ivpu_gem_create_object(), do not add the BO to vdev->bo_list when a failure occurs inside drm_gem_shmem_create(); ensure a deleted BO is not left on the list when ivpu_gem_bo_free() is not called.
Linux kernel (accel/ivpu) vdev->bo_list update in ivpu_gem_create_object() = Remove adding 'bo' to vdev->bo_list when drm_gem_shmem_create() fails - Configuration
Apply the resolved logic for accel/ivpu page fault: in ivpu_bo_unbind_all_bos_from_context(), avoid operating on BOs that were deleted but left on the list due to drm_gem_shmem_create() failure.
Linux kernel (accel/ivpu) ivpu_bo_unbind_all_bos_from_context() behavior = Prevent page fault by ensuring deleted BOs are not kept in context unbind list
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68730?
CVE-2025-68730 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-68730?
To fix CVE-2025-68730, update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What are the potential impacts of CVE-2025-68730?
The potential impacts of CVE-2025-68730 include system instability and possible denial of service due to a page fault.
Which versions of the Linux kernel are affected by CVE-2025-68730?
CVE-2025-68730 affects multiple versions of the Linux kernel prior to the application of the relevant patches.
Is CVE-2025-68730 being actively exploited in the wild?
As of now, there are no confirmed reports of active exploitation of CVE-2025-68730 in the wild.