CVE-2025-68748

Linux Kernel 6.10-6.12.63, 6.13-6.17.13, 6.18.0-6.18.2 - Use-After-Free in Panthor FW Event Processing

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processing The function panthor_fw_unplug() will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this point. process_fw_events_work() can in this case try to access said freed memory. Simply call disable_work_sync() to both drain and prevent future invocation of process_fw_events_work().

Scores

EPSS 0.0002
EPSS Percentile 6.3%

Details

Status published
Products (13)
linux/Kernel 6.10.0 - 6.12.63linux
linux/Kernel 6.13.0 - 6.17.13linux
linux/Kernel 6.18.0 - 6.18.2linux
Linux/Linux < 6.10
Linux/Linux 6.10
Linux/Linux 6.12.63 - 6.12.*
Linux/Linux 6.17.13 - 6.17.*
Linux/Linux 6.18.2 - 6.18.*
Linux/Linux 6.19
Linux/Linux de85488138247d034eb3241840424a54d660926b - 31db188355a49337e3e8ec98b99377e482eab22c
... and 3 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026