# CVE-2025-68189: linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm: Fix GEM free for imported dma-bufs  Imp...

CVE-2025-68189 is fixed in linux on 1 platform by DEBIAN-CVE-2025-68189 (version 6.17.8-1), released December 16, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-68189
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0014
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 16, 2025

## Description

In the Linux kernel, the following vulnerability has been resolved:  drm/msm: Fix GEM free for imported dma-bufs  Imported dma-bufs also have obj->resv != &obj->_resv.  So we should check both this condition in addition to flags for handling the _NO_SHARE case.  Fixes this splat that was reported with IRIS video playback:      ------------[ cut here ]------------     WARNING: CPU: 3 PID: 2040 at drivers/gpu/drm/msm/msm_gem.c:1127 msm_gem_free_object+0x1f8/0x264 [msm]     CPU: 3 UID: 1000 PID: 2040 Comm: .gnome-shell-wr Not tainted 6.17.0-rc7 #1 PREEMPT     pstate: 81400005 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)     pc : msm_gem_free_object+0x1f8/0x264 [msm]     lr : msm_gem_free_object+0x138/0x264 [msm]     sp : ffff800092a1bb30     x29: ffff800092a1bb80 x28: ffff800092a1bce8 x27: ffffbc702dbdbe08     x26: 0000000000000008 x25: 0000000000000009 x24: 00000000000000a6     x23: ffff00083c72f850 x22: ffff00083c72f868 x21: ffff00087e69f200     x20: ffff00087e69f330 x19: ffff00084d157ae0 x18: 0000000000000000     x17: 0000000000000000 x16: ffffbc704bd46b80 x15: 0000ffffd0959540     x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000     x11: ffffbc702e6cdb48 x10: 0000000000000000 x9 : 000000000000003f     x8 : ffff800092a1ba90 x7 : 0000000000000000 x6 : 0000000000000020     x5 : ffffbc704bd46c40 x4 : fffffdffe102cf60 x3 : 0000000000400032     x2 : 0000000000020000 x1 : ffff00087e6978e8 x0 : ffff00087e6977e8     Call trace:      msm_gem_free_object+0x1f8/0x264 [msm] (P)      drm_gem_object_free+0x1c/0x30 [drm]      drm_gem_object_handle_put_unlocked+0x138/0x150 [drm]      drm_gem_object_release_handle+0x5c/0xcc [drm]      drm_gem_handle_delete+0x68/0xbc [drm]      drm_gem_close_ioctl+0x34/0x40 [drm]      drm_ioctl_kernel+0xc0/0x130 [drm]      drm_ioctl+0x360/0x4e0 [drm]      __arm64_sys_ioctl+0xac/0x104      invoke_syscall+0x48/0x104      el0_svc_common.constprop.0+0x40/0xe0      do_el0_svc+0x1c/0x28      el0_svc+0x34/0xec      el0t_64_sync_handler+0xa0/0xe4      el0t_64_sync+0x198/0x19c     ---[ end trace 0000000000000000 ]---     ------------[ cut here ]------------  Patchwork: https://patchwork.freedesktop.org/patch/676273/

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 14 | 6.17.8-1 | [DEBIAN-CVE-2025-68189](https://patchblox.com/security/data/fix/linux/debian-cve-2025-68189.md) | Dec 16, 2025 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.