CVE-2025-68793

A flaw was found in the drm/amdgpu component of the Linux kernel. A local user with the ability to submit GPU work and trigger GPU timeout or recovery could exploit a race condition during GPU recovery. This race condition, occurring between the scheduler timeout callback and the TDR work queue, leads to a use-after-free (UAF) vulnerability. Successful exploitation can result in a kernel crash, causing a Denial of Service (DoS), and may also lead to information disclosure or privilege escalation.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires local user access, physical or pass-through AMD graphics hardware, and the ability to win a race condition during recovery from a GPU scheduler timeout. Deployments without AMD GPU hardware or configurations where unprivileged users cannot interact with DRM device nodes are not exposed. Furthermore, the issue cannot be triggered across a network boundary, substantially constraining its reach in typical enterprise installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.