In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: Fix UAF race between device unplug and FW event processing

The function panthor_fw_unplug() will free the FW memory sections.
The problem is that there could still be pending FW events which are yet
not handled at this point. process_fw_events_work() can in this case try
to access said freed memory.

Simply call disable_work_sync() to both drain and prevent future
invocation of process_fw_events_work().

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00025.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
de85488138247d034eb3241840424a54d660926b affected < 31db188355a49337e3e8ec98b99377e482eab22c
de85488138247d034eb3241840424a54d660926b affected < 5e3ff56d4cb591daea70786d07dc21d06dc34108
de85488138247d034eb3241840424a54d660926b affected < 6c1da9ae2c123a9ffda5375e64cc81f9ed3cc04a
de85488138247d034eb3241840424a54d660926b affected < 7051f6ba968fa69918d72cc26de4d6cf7ea05b90
Linux Linux affected
Version Status Constraints
6.10 affected —
0 unaffected < 6.10
6.12.63 unaffected ≤ 6.12.*
6.17.13 unaffected ≤ 6.17.*
6.18.2 unaffected ≤ 6.18.*
6.19 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/31db188355a49337e3e8ec98b99377e482eab22c cve-icon cve-icon
https://git.kernel.org/stable/c/5e3ff56d4cb591daea70786d07dc21d06dc34108 cve-icon cve-icon
https://git.kernel.org/stable/c/6c1da9ae2c123a9ffda5375e64cc81f9ed3cc04a cve-icon cve-icon
https://git.kernel.org/stable/c/7051f6ba968fa69918d72cc26de4d6cf7ea05b90 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025122417-CVE-2025-68748-45cb@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-68748 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-68748 cve-icon
History

Thu, 25 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References

Wed, 24 Dec 2025 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processing The function panthor_fw_unplug() will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this point. process_fw_events_work() can in this case try to access said freed memory. Simply call disable_work_sync() to both drain and prevent future invocation of process_fw_events_work().
Title drm/panthor: Fix UAF race between device unplug and FW event processing
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-09T08:32:53.110Z

Reserved: 2025-12-24T10:30:51.032Z

Link: CVE-2025-68748

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-24T13:16:29.733

Modified: 2025-12-29T15:58:13.147

Link: CVE-2025-68748

cve-icon Redhat

Severity :

Publid Date: 2025-12-24T00:00:00Z

Links: CVE-2025-68748 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.