CVE-2025-68732

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68732
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68732.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68732
Downstream
Related
Published
2025-12-24T10:33:14Z
Modified
2026-08-12T03:30:13Z
Summary
gpu: host1x: Fix race in syncpt alloc/free
Details

In the Linux kernel, the following vulnerability has been resolved:

gpu: host1x: Fix race in syncpt alloc/free

Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking.

This ensures no thread can acquire the syncpt_mutex after the refcount drops to zero but before syncpt_release acquires it. This prevents races where syncpoints could be allocated while still being cleaned up from a previous release.

Remove explicit mutex locking in syncpt_release as kref_put_mutex() handles this atomically.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68732.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f5ba33fb9690566c382624637125827b5512e766
Fixed
ca9388fba50dac2eb71c13702b7022a801bef90e
Fixed
4aeaece518fa4436af93d1d8b786200d9656ff4b
Fixed
6245cce711e2cdb2cc75c0bb8632952e36f8c972
Fixed
4e6e07ce0197aecfb6c4a62862acc93b3efedeb7
Fixed
d138f73ffb0c57ded473c577719e6e551b7b1f27
Fixed
79197c6007f2afbfd7bcf5b9b80ccabf8483d774
Fixed
c7d393267c497502fa737607f435f05dfe6e3d9b

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68732.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
5.15.198
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.160
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.120
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.63
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.13
Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68732.json"