CVE-2025-68170 drm/radeon: Do not kfree() devres managed rdev
A use-after-free vulnerability in the Linux kernel's Radeon driver can cause a system crash if the driver probe fails.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68170?
CVE-2025-68170 is a high-severity use after free vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Do not kfree() devres managed rdev
Since the allocation of the drivers main structure was changed to devm_drm_dev_alloc() rdev is managed by devres and we shouldn't be calling kfree() on it.
This fixes things exploding if the driver probe fails and devres cleans up the rdev after we already free'd it.
(cherry picked from commit 16c0681617b8a045773d4d87b6140002fa75b03b)
Which versions are affected by CVE-2025-68170?
How do I fix CVE-2025-68170?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2025-68170 being exploited?
There is no known exploitation of CVE-2025-68170 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-68170, DEBIAN-CVE-2025-68170, GHSA-8rp7-mg54-f432, UBUNTU-CVE-2025-68170.