Review reviewHigh

CVE-2025-68314

Linux

In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure last_fence is always updated Update last_fence in the vm-bind path instead of kernel managed path. last_fence is used to wait for work to finish in vm_bind contexts but not used for kernel managed contexts. This fixes a bug where last_fence is not waited on context close leading to faults as resources are freed while in use. Patchwork: https://patchwork.freedesktop.org/patch/680080/

CVSS: 8.8
EPSS: 0.12%
CISA KEV: Not listed
Published: 2025.12.17

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.12%

Technical severityCVSS 8.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 92395af63a9958615edfa9d4ef1ea72c92a00410 < 8ee817ceafba266d9c6f3a09babd2ac7441d9a2b, >= 92395af63a9958615edfa9d4ef1ea72c92a00410 < 86404a9e3013d814a772ac407573be5d3cd4ee0d, >= 6.17
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE: Not available