CVE-2025-68749
kernel: accel/ivpu: Fix race condition when unbinding BOs
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 24, 2025
Updated · July 30, 2026
Description
A race condition was found in the Linux kernel's Intel VPU (ivpu) accelerator driver. When unbinding buffer objects (BOs), ivpu_gem_bo_free() can remove a BO from the list before it is fully unmapped. This race causes file_priv_unbind() to trigger a 'Memory manager not clean during takedown' warning in drm_mm_takedown() during context teardown.
Statement
This flaw affects systems with Intel VPU hardware using the ivpu accelerator driver. The issue manifests as a warning during context teardown due to improper synchronization between BO removal and unmapping operations. While this causes a kernel warning, it does not result in a crash or security compromise.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-821 · Incorrect Synchronization