CVE Database›Document archive›CVE-2025-68749

CVE-2025-68749

kernel: accel/ivpu: Fix race condition when unbinding BOs

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · December 24, 2025

Updated · July 30, 2026

Description

A race condition was found in the Linux kernel's Intel VPU (ivpu) accelerator driver. When unbinding buffer objects (BOs), ivpu_gem_bo_free() can remove a BO from the list before it is fully unmapped. This race causes file_priv_unbind() to trigger a 'Memory manager not clean during takedown' warning in drm_mm_takedown() during context teardown.

Statement

This flaw affects systems with Intel VPU hardware using the ivpu accelerator driver. The issue manifests as a warning during context teardown due to improper synchronization between BO removal and unmapping operations. While this causes a kernel warning, it does not result in a crash or security compromise.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-821 · Incorrect Synchronization