CVE-2025-68747: drm/panthor: Fix UAF on kernel BO VA nodes
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Fix UAF on kernel BO VA nodes
If the MMU is down, panthorvmunmaprange() might return an error. We expect the page table to be updated still, and if the MMU is blocked, the rest of the GPU should be blocked too, so no risk of accessing physical memory returned to the system (which the current code doesn't cover for anyway).
Proceed with the rest of the cleanup instead of bailing out and leaving the vanode inserted in the drmmm, which leads to UAF when other adjacent nodes are removed from the drmmm tree.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68747?
CVE-2025-68747 is considered a medium severity vulnerability due to its potential impact on system stability.
How do I fix CVE-2025-68747?
To resolve CVE-2025-68747, update your Linux kernel to the latest stable version that includes the fix.
What systems are affected by CVE-2025-68747?
CVE-2025-68747 affects the Linux kernel, specifically in the drm/panthor area.
What are the potential consequences of CVE-2025-68747?
The vulnerability could lead to denial of service if left unaddressed, especially during MMU operation.
Is there a public exploit for CVE-2025-68747?
As of now, there are no known public exploits for CVE-2025-68747.