CVE-2025-68798

A race condition flaw was found in the Linux kernel's AMD performance monitoring unit (PMU) code. A subtle timing window exists between NMI-triggered throttling (which clears an event pointer) and amd_pmu_enable_all() (which dereferences it). This can result in a NULL pointer dereference and kernel crash on AMD systems using perf.

This vulnerability affects only AMD processors and requires active use of the perf subsystem. The race window is narrow but was reproducible by syzkaller fuzzing. Intel and other x86 platforms are not affected by this specific code path.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.