{
  "cveId": "CVE-2025-68189",
  "url": "https://patchblox.com/security/cve/CVE-2025-68189",
  "summary": "CVE-2025-68189 is fixed in linux on 1 platform by DEBIAN-CVE-2025-68189 (version 6.17.8-1), released December 16, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm: Fix GEM free for imported dma-bufs  Imp...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/msm: Fix GEM free for imported dma-bufs  Imported dma-bufs also have obj-\u003Eresv != \u0026obj-\u003E_resv.  So we should check both this condition in addition to flags for handling the _NO_SHARE case.  Fixes this splat that was reported with IRIS video playback:      ------------[ cut here ]------------     WARNING: CPU: 3 PID: 2040 at drivers/gpu/drm/msm/msm_gem.c:1127 msm_gem_free_object\u002B0x1f8/0x264 [msm]     CPU: 3 UID: 1000 PID: 2040 Comm: .gnome-shell-wr Not tainted 6.17.0-rc7 #1 PREEMPT     pstate: 81400005 (Nzcv daif \u002BPAN -UAO -TCO \u002BDIT -SSBS BTYPE=--)     pc : msm_gem_free_object\u002B0x1f8/0x264 [msm]     lr : msm_gem_free_object\u002B0x138/0x264 [msm]     sp : ffff800092a1bb30     x29: ffff800092a1bb80 x28: ffff800092a1bce8 x27: ffffbc702dbdbe08     x26: 0000000000000008 x25: 0000000000000009 x24: 00000000000000a6     x23: ffff00083c72f850 x22: ffff00083c72f868 x21: ffff00087e69f200     x20: ffff00087e69f330 x19: ffff00084d157ae0 x18: 0000000000000000     x17: 0000000000000000 x16: ffffbc704bd46b80 x15: 0000ffffd0959540     x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000     x11: ffffbc702e6cdb48 x10: 0000000000000000 x9 : 000000000000003f     x8 : ffff800092a1ba90 x7 : 0000000000000000 x6 : 0000000000000020     x5 : ffffbc704bd46c40 x4 : fffffdffe102cf60 x3 : 0000000000400032     x2 : 0000000000020000 x1 : ffff00087e6978e8 x0 : ffff00087e6977e8     Call trace:      msm_gem_free_object\u002B0x1f8/0x264 [msm] (P)      drm_gem_object_free\u002B0x1c/0x30 [drm]      drm_gem_object_handle_put_unlocked\u002B0x138/0x150 [drm]      drm_gem_object_release_handle\u002B0x5c/0xcc [drm]      drm_gem_handle_delete\u002B0x68/0xbc [drm]      drm_gem_close_ioctl\u002B0x34/0x40 [drm]      drm_ioctl_kernel\u002B0xc0/0x130 [drm]      drm_ioctl\u002B0x360/0x4e0 [drm]      __arm64_sys_ioctl\u002B0xac/0x104      invoke_syscall\u002B0x48/0x104      el0_svc_common.constprop.0\u002B0x40/0xe0      do_el0_svc\u002B0x1c/0x28      el0_svc\u002B0x34/0xec      el0t_64_sync_handler\u002B0xa0/0xe4      el0t_64_sync\u002B0x198/0x19c     ---[ end trace 0000000000000000 ]---     ------------[ cut here ]------------  Patchwork: https://patchwork.freedesktop.org/patch/676273/",
  "published": "2025-12-16T14:15:51Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00144,
  "epssPercentile": 0.0373,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.17.8-1",
      "fix": "DEBIAN-CVE-2025-68189",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-68189",
      "released": "2025-12-16T14:15:51Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}