CVE-2025-68230 drm/amdgpu: fix gpu page fault after hibernation on PF passthrough
A local attacker can trigger a GPU page fault and denial of service in the amdgpu driver after hibernation in PF passthrough environments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68230?
CVE-2025-68230 is a denial of service vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix gpu page fault after hibernation on PF passthrough
On PF passthrough environment, after hibernate and then resume, coralgemm will cause gpu page fault.
Mode1 reset happens during hibernate, but partition mode is not restored on resume, register mmCP_HYP_XCP_CTL and mmCP_PSP_XCP_CTL is not right after resume. When CP access the MQD BO, wrong stride size is used, this will cause out of bound access on the MQD BO, resulting page fault.
The fix is to ensure gfx_v9_4_3_switch_compute_partition() is called when resume from a hibernation. KFD resume is called separately during a reset recovery or resume from suspend sequence. Hence it's not required to be called as part of partition switch.
(cherry picked from commit 5d1b32cfe4a676fe552416cb5ae847b215463a1a)
Which versions are affected by CVE-2025-68230?
How do I fix CVE-2025-68230?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-68230 being exploited?
There is no known exploitation of CVE-2025-68230 in the wild and no public exploit code.
Sources
Also known as AZL-72451, BELL-CVE-2025-68230, DEBIAN-CVE-2025-68230, GHSA-mj73-x9xh-684v, ROOT-OS-DEBIAN-13-CVE-2025-68230, ROOT-OS-UBUNTU-2204-CVE-2025-68230 and 2 more.