CVE-2025-68732

Linux Kernel - Race Condition in host1x Syncpoint Allocation/Release

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking. This ensures no thread can acquire the syncpt_mutex after the refcount drops to zero but before syncpt_release acquires it. This prevents races where syncpoints could be allocated while still being cleaned up from a previous release. Remove explicit mutex locking in syncpt_release as kref_put_mutex() handles this atomically.

Scores

EPSS 0.0005
EPSS Percentile 15.3%

Details

Status published
Products (22)
linux/Kernel 5.13.0 - 5.15.198linux
linux/Kernel 5.16.0 - 6.1.160linux
linux/Kernel 6.13.0 - 6.17.13linux
linux/Kernel 6.18.0 - 6.18.2linux
linux/Kernel 6.2.0 - 6.6.120linux
linux/Kernel 6.7.0 - 6.12.63linux
Linux/Linux < 5.13
Linux/Linux 5.13
Linux/Linux 5.15.198 - 5.15.*
Linux/Linux 6.1.160 - 6.1.*
... and 12 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026