CVE-2025-68174

amd/amdkfd: enhance kfd process check in switch partition

CVE-2025-68174 is fixed in 18 products on 1 platform, first by DEBIAN-CVE-2025-68174, released December 16, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0018
7th percentile

In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: enhance kfd process check in switch partition current switch partition only check if kfd_processes_table is empty. kfd_prcesses_table entry is deleted in kfd_process_notifier_release, but kfd_process tear down is in kfd_process_wq_release. consider two processes: Process A (workqueue) -> kfd_process_wq_release -> Access kfd_node member Process B switch partition -> amdgpu_xcp_pre_partition_switch -> amdgpu_amdkfd_device_fini_sw -> kfd_node tear down. Process A and B may trigger a race as shown in dmesg log. This patch is to resolve the race by adding an atomic kfd_process counter kfd_processes_count, it increment as create kfd process, decrement as finish kfd_process_wq_release. v2: Put kfd_processes_count per kfd_dev, move decrement to kfd_process_destroy_pdds and bug fix. (Philip Yang) [3966658.307702] divide error: 0000 [#1] SMP NOPTI [3966658.350818] i10nm_edac [3966658.356318] CPU: 124 PID: 38435 Comm: kworker/124:0 Kdump: loaded Tainted [3966658.356890] Workqueue: kfd_process_wq kfd_process_wq_release [amdgpu] [3966658.362839] nfit [3966658.366457] RIP: 0010:kfd_get_num_sdma_engines+0x17/0x40 [amdgpu] [3966658.366460] Code: 00 00 e9 ac 81 02 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 0f 1f 44 00 00 48 8b 4f 08 48 8b b7 00 01 00 00 8b 81 58 26 03 00 99 <f7> be b8 01 00 00 80 b9 70 2e 00 00 00 74 0b 83 f8 02 ba 02 00 00 [3966658.380967] x86_pkg_temp_thermal [3966658.391529] RSP: 0018:ffffc900a0edfdd8 EFLAGS: 00010246 [3966658.391531] RAX: 0000000000000008 RBX: ffff8974e593b800 RCX: ffff888645900000 [3966658.391531] RDX: 0000000000000000 RSI: ffff888129154400 RDI: ffff888129151c00 [3966658.391532] RBP: ffff8883ad79d400 R08: 0000000000000000 R09: ffff8890d2750af4 [3966658.391532] R10: 0000000000000018 R11: 0000000000000018 R12: 0000000000000000 [3966658.391533] R13: ffff8883ad79d400 R14: ffffe87ff662ba00 R15: ffff8974e593b800 [3966658.391533] FS: 0000000000000000(0000) GS:ffff88fe7f600000(0000) knlGS:0000000000000000 [3966658.391534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [3966658.391534] CR2: 0000000000d71000 CR3: 000000dd0e970004 CR4: 0000000002770ee0 [3966658.391535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [3966658.391535] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 [3966658.391536] PKRU: 55555554 [3966658.391536] Call Trace: [3966658.391674] deallocate_sdma_queue+0x38/0xa0 [amdgpu] [3966658.391762] process_termination_cpsch+0x1ed/0x480 [amdgpu] [3966658.399754] intel_powerclamp [3966658.402831] kfd_process_dequeue_from_all_devices+0x5b/0xc0 [amdgpu] [3966658.402908] kfd_process_wq_release+0x1a/0x1a0 [amdgpu] [3966658.410516] coretemp [3966658.434016] process_one_work+0x1ad/0x380 [3966658.434021] worker_thread+0x49/0x310 [3966658.438963] kvm_intel [3966658.446041] ? process_one_work+0x380/0x380 [3966658.446045] kthread+0x118/0x140 [3966658.446047] ? __kthread_bind_mask+0x60/0x60 [3966658.446050] ret_from_fork+0x1f/0x30 [3966658.446053] Modules linked in: kpatch_20765354(OEK) [3966658.455310] kvm [3966658.464534] mptcp_diag xsk_diag raw_diag unix_diag af_packet_diag netlink_diag udp_diag act_pedit act_mirred act_vlan cls_flower kpatch_21951273(OEK) kpatch_18424469(OEK) kpatch_19749756(OEK) [3966658.473462] idxd_mdev [3966658.482306] kpatch_17971294(OEK) sch_ingress xt_conntrack amdgpu(OE) amdxcp(OE) amddrm_buddy(OE) amd_sched(OE) amdttm(OE) amdkcl(OE) intel_ifs iptable_mangle tcm_loop target_core_pscsi tcp_diag target_core_file inet_diag target_core_iblock target_core_user target_core_mod coldpgs kpatch_18383292(OEK) ip6table_nat ip6table_filter ip6_tables ip_set_hash_ipportip ip_set_hash_ipportnet ip_set_hash_ipport ip_set_bitmap_port xt_comment iptable_nat nf_nat iptable_filter ip_tables ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 sn_core_odd(OE) i40e overlay binfmt_misc tun bonding(OE) aisqos(OE) aisqo ---truncated---

Where it's fixed

ProductFixed inFixReleased
Linux
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-64kb · sles 15.7 6.4.0-150700.53.31.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-64kb · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-azure · sles 15.7 6.4.0-150700.20.27.1 SUSE-SU-2026:0472-1 Feb 12, 2026
kernel-azure · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-default · sles 15.7 6.4.0-150700.53.31.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-default · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.26.1.160000.2.7 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.31.1.150700.17.21.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-default-base · sles 16.0 6.12.0-160000.26.1.160000.2.7 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.31.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-docs · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-kvmsmall · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-livepatch-SLE15-SP7-RT_Update_9 · sles 15.7 1-150700.1.3.2 SUSE-SU-2026:0587-1 Feb 20, 2026
kernel-livepatch-SLE15-SP7_Update_9 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.31.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-obs-qa · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-source · sles 15.7 6.4.0-150700.53.31.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-source · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-source-azure · sles 15.7 6.4.0-150700.20.27.1 SUSE-SU-2026:0472-1 Feb 12, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.31.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-syms · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
kernel-syms-azure · sles 15.7 6.4.0-150700.20.27.1 SUSE-SU-2026:0472-1 Feb 12, 2026
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.26.1 OPENSUSE-SU-2026:20287-1 Feb 27, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.31.1 SUSE-SU-2026:0447-1 Feb 11, 2026
kernel-zfcpdump · sles 16.0 6.12.0-160000.26.1 SUSE-SU-2026:20599-1 Feb 27, 2026
linux · Debian 13.5 (trixie) 6.12.115-2 DEBIAN-CVE-2025-68174 Dec 16, 2025
linux · Debian 14 6.17.8-1 DEBIAN-CVE-2025-68174 Dec 16, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.