CVE-2025-68207

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbind Cancel and wait for any Dead CT worker to complete before continuing with device unbinding. Else the worker will end up using resources freed by the undind operation. (cherry picked from commit 492671339114e376aaa38626d637a2751cdef263)

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-25)

Published

2025-12-16

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/35959ab7d16b618616edf6df882a4533d2efe193
• https://git.kernel.org/stable/c/95af8f4fdce8349a5fe75264007f1af2aa1082ea
• https://git.kernel.org/stable/c/ce6ccf8e881a919bf902174ac879f80c97669498

Check your stackJSON