{
  "cveId": "CVE-2025-68203",
  "url": "https://patchblox.com/security/cve/CVE-2025-68203",
  "summary": "CVE-2025-68203 is fixed in linux on 1 platform by DEBIAN-CVE-2025-68203 (version 6.17.9-1), released December 16, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "drm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process  Fix a potential deadlock caused by inconsistent spinlock usage between interrupt and process contexts in the userq fence driver.  The issue occurs when amdgpu_userq_fence_driver_process() is called from both: - Interrupt context: gfx_v11_0_eop_irq() -\u003E amdgpu_userq_fence_driver_process() - Process context: amdgpu_eviction_fence_suspend_worker() -\u003E   amdgpu_userq_fence_driver_force_completion() -\u003E amdgpu_userq_fence_driver_process()  In interrupt context, the spinlock was acquired without disabling interrupts, leaving it in {IN-HARDIRQ-W} state. When the same lock is acquired in process context, the kernel detects inconsistent locking since the process context acquisition would enable interrupts while holding a lock previously acquired in interrupt context.  Kernel log shows: [ 4039.310790] inconsistent {IN-HARDIRQ-W} -\u003E {HARDIRQ-ON-W} usage. [ 4039.310804] kworker/7:2/409 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 4039.310818] ffff9284e1bed000 (\u0026fence_drv-\u003Efence_list_lock){?...}-{3:3}, [ 4039.310993] {IN-HARDIRQ-W} state was registered at: [ 4039.311004]   lock_acquire\u002B0xc6/0x300 [ 4039.311018]   _raw_spin_lock\u002B0x39/0x80 [ 4039.311031]   amdgpu_userq_fence_driver_process.part.0\u002B0x30/0x180 [amdgpu] [ 4039.311146]   amdgpu_userq_fence_driver_process\u002B0x17/0x30 [amdgpu] [ 4039.311257]   gfx_v11_0_eop_irq\u002B0x132/0x170 [amdgpu]  Fix by using spin_lock_irqsave()/spin_unlock_irqrestore() to properly manage interrupt state regardless of calling context.  (cherry picked from commit ded3ad780cf97a04927773c4600823b84f7f3cc2)",
  "published": "2025-12-16T14:15:53Z",
  "severity": "Moderate",
  "cvss": 5.5,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68203",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.17.9-1",
      "fix": "DEBIAN-CVE-2025-68203",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-68203",
      "released": "2025-12-16T14:15:53Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}