High 7.8Published Dec 24, 2025

CVE-2025-68749accel/ivpu: Fix race condition when unbinding BOs

Updated under an hour ago (Oct 28, 2026, 8:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BOs list before it gets unmapped. Then file_priv_unbind() triggers a warning in drm_mm_takedown() during context teardown. Protect the unmapping sequence with bo_list_lock to ensure the BO is always fully unmapped when removed from the list. This ensures the BO is either fully unmapped at context teardown time or present on the list and unmapped by file_priv_unbind().

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 before 0328bb097bef05a796217c54b3d651cc3782827c; from 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 before fb16493ebd8f171bcf0772262619618a131f30f7; from 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 before d71333ffdd3707d84cfb95acfaf8ba892adc066b; from 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 before 00812636df370bedf4e44a0c81b86ea96bca8628	CNA record
linux linux_kernel linux:linux_kernel	from 6.8 before 6.12.68; from 6.13 before 6.17.13; from 6.18 before 6.18.2	NVD

References

References

https://git.kernel.org/stable/c/0328bb097bef05a796217c54b3d651cc3782827c	patch
https://git.kernel.org/stable/c/fb16493ebd8f171bcf0772262619618a131f30f7	patch
https://git.kernel.org/stable/c/d71333ffdd3707d84cfb95acfaf8ba892adc066b	patch
https://git.kernel.org/stable/c/00812636df370bedf4e44a0c81b86ea96bca8628	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.