CVE-2025-68732 gpu: host1x: Fix race in syncpt alloc/free
A race condition in the Linux kernel host1x driver allows local attackers to cause denial of service or potentially escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68732?
CVE-2025-68732 is a vulnerability in Linux, published on 24 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
gpu: host1x: Fix race in syncpt alloc/free
Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking.
This ensures no thread can acquire the syncpt_mutex after the refcount drops to zero but before syncpt_release acquires it. This prevents races where syncpoints could be allocated while still being cleaned up from a previous release.
Remove explicit mutex locking in syncpt_release as kref_put_mutex() handles this atomically.
Which versions are affected by CVE-2025-68732?
How do I fix CVE-2025-68732?
Apply the vendor's patch.
Is CVE-2025-68732 being exploited?
There is no known exploitation of CVE-2025-68732 in the wild and no public exploit code.
Sources
Also known as AZL-73072, BELL-CVE-2025-68732, DEBIAN-CVE-2025-68732, GHSA-4c9c-638j-jrpm, ROOT-OS-DEBIAN-12-CVE-2025-68732, ROOT-OS-UBUNTU-2204-CVE-2025-68732 and 2 more.