CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free
In the Linux kernel, the following vulnerability has been resolved:
gpu: host1x: Fix race in syncpt alloc/free
Fix race condition between host1xsyncptalloc() and host1xsyncptput() by using krefputmutex() instead of krefput() + manual mutex locking.
This ensures no thread can acquire the syncptmutex after the refcount drops to zero but before syncptrelease acquires it. This prevents races where syncpoints could be allocated while still being cleaned up from a previous release.
Remove explicit mutex locking in syncptrelease as krefputmutex() handles this atomically.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68732?
CVE-2025-68732 has been classified as a moderate severity vulnerability affecting the Linux kernel.
What is the nature of CVE-2025-68732?
CVE-2025-68732 is a race condition vulnerability in the host1x module of the Linux kernel's GPU subsystem.
How do I fix CVE-2025-68732?
To fix CVE-2025-68732, update your Linux kernel to the latest stable version where the vulnerability has been addressed.
Which Linux kernel versions are affected by CVE-2025-68732?
CVE-2025-68732 affects multiple versions of the Linux kernel that include the host1x GPU module.
Is CVE-2025-68732 being actively exploited?
As of the latest information, there are no known active exploits leveraging CVE-2025-68732.