AZL-73072
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-73072.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-73072
- Upstream
- Published
- 2025-12-24T11:16:02Z
- Modified
- 2026-04-01T05:22:15Z
- Summary
- CVE-2025-68732 affecting package kernel for versions less than 6.6.121.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
gpu: host1x: Fix race in syncpt alloc/free
Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking.
This ensures no thread can acquire the syncpt_mutex after the refcount drops to zero but before syncpt_release acquires it. This prevents races where syncpoints could be allocated while still being cleaned up from a previous release.
Remove explicit mutex locking in syncpt_release as kref_put_mutex() handles this atomically.
- References