CVE-2025-68230

{
  "id": "CVE-2025-68230",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2025-12-16T14:15:57.323",
  "lastModified": "2026-10-21T13:18:21.477",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix gpu page fault after hibernation on PF passthrough\n\nOn PF passthrough environment, after hibernate and then resume, coralgemm\nwill cause gpu page fault.\n\nMode1 reset happens during hibernate, but partition mode is not restored\non resume, register mmCP_HYP_XCP_CTL and mmCP_PSP_XCP_CTL is not right\nafter resume. When CP access the MQD BO, wrong stride size is used,\nthis will cause out of bound access on the MQD BO, resulting page fault.\n\nThe fix is to ensure gfx_v9_4_3_switch_compute_partition() is called\nwhen resume from a hibernation.\nKFD resume is called separately during a reset recovery or resume from\nsuspend sequence. Hence it's not required to be called as part of\npartition switch.\n\n(cherry picked from commit 5d1b32cfe4a676fe552416cb5ae847b215463a1a)"
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/amdgpu: corrige el fallo de página de la GPU después de la hibernación en el passthrough de PF\n\nEn un entorno de passthrough de PF, después de hibernar y luego reanudar, coralgemm causará un fallo de página de la GPU.\n\nEl reinicio de Modo1 ocurre durante la hibernación, pero el modo de partición no se restaura al reanudar, y el registro mmCP_HYP_XCP_CTL y mmCP_PSP_XCP_CTL no es correcto después de la reanudación. Cuando la CP accede al MQD BO, se utiliza un tamaño de paso incorrecto, lo que causará un acceso fuera de límites en el MQD BO, resultando en un fallo de página.\n\nLa solución es asegurar que gfx_v9_4_3_switch_compute_partition() sea llamada al reanudar desde una hibernación.\nLa reanudación de KFD se llama por separado durante una recuperación de reinicio o una secuencia de reanudación desde suspensión. Por lo tanto, no es necesario que sea llamada como parte de la conmutación de partición.\n\n(seleccionado de la confirmación 5d1b32cfe4a676fe552416cb5ae847b215463a1a)"
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c",
            "drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "955220b04d42c41050158fec0f53957f320b96f9",
              "lessThan": "f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "955220b04d42c41050158fec0f53957f320b96f9",
              "lessThan": "a45d6359eefb41e08d374a3260b10bff5626823b",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "955220b04d42c41050158fec0f53957f320b96f9",
              "lessThan": "eef72d856f978955e633c270abb1f7ec7b61c6d2",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "955220b04d42c41050158fec0f53957f320b96f9",
              "lessThan": "eb6e7f520d6efa4d4ebf1671455abe4a681f7a05",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c",
            "drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.5",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.5",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.160",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.60",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.17.10",
              "lessThanOrEqual": "6.17.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/a45d6359eefb41e08d374a3260b10bff5626823b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/eb6e7f520d6efa4d4ebf1671455abe4a681f7a05",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/eef72d856f978955e633c270abb1f7ec7b61c6d2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}