CVE-2025-68793High· 7.0▾ TwilightA flaw was found in the `drm/amdgpu` component of the Linux kernel. A local user with the ability to submit GPU work and trigger GPU timeout or recovery could exploit a race condition during GPU recovery. This race condition, occurring bet…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 38.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the vendor's CSAF advisory record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.1%
Last analysed / modified upstream
7.8 → 7
0.1% → 0.1%
A flaw was found in the drm/amdgpu component of the Linux kernel. A local user with the ability to submit GPU work and trigger GPU timeout or recovery could exploit a race condition during GPU recovery. This race condition, occurring between the scheduler timeout callback and the TDR work queue, leads to a use-after-free (UAF) vulnerability. Successful exploitation can result in a kernel crash, causing a Denial of Service (DoS), and may also lead to information disclosure or privilege escalation.
kernel: Linux kernel: drm/amdgpu use-after-free vulnerability leading to denial of service — rated Moderate by Red Hat. Released 2025-01-01, updated 2026-10-23.
Affected:
No fix planned:
Not affected:
Out of support scope
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-80764Medium· 4.7kernel: Bluetooth: hci_event: fix LE list UAF on reset (CVE-2026-80764)
CVE-2026-74264Medium· 4.7kernel: net: watchdog: fix refcount tracking races (CVE-2026-74264)
CVE-2026-64554High· 7.0kernel: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (CVE-2026-64554)
CVE-2026-64475High· 7.0kernel: vfio/pci: Release the VGA arbiter client on register_device() failure (CVE-2026-64475)
CVE-2026-109729Medium· 5.4Use-after-free in the JavaScript Engine: JIT component
CVE-2026-68202High· 7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queue_delete() closes the queue timer, then frees it