CVE-2025-68730
HIGH 7.8 ALL-YEARSIn the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() Don't add BO to the vdev->bo_list in ivpu_gem_create_object(). When failure happens inside drm_gem_shmem_create(), the BO is not fully created and ivpu_gem_bo_free() callback will not be called causing a deleted BO to be left on the list.
Severe if exploited (CVSS 7.8), but no confirmed exploitation. Patch on a normal cadence.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 7th percentile
Impact if exploited
7.8CVSS 3.1 · HIGH · CNA
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityHigh
What an attacker needs
- ⚠Access: Requires local access to the host
- ⚠Privileges: Requires a low-privilege account
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Weakness (CWE)
Not classified.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References and research data (JSON)
Vendor product assessments
Showing 32 of 274 vendor product statements; 242 omitted. Read the full vendor advisory.
kernel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel
- none available: Fix deferred
kernel-64k-debug-devel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-64k-debug-devel
- none available: Fix deferred
kernel-64k-devel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-64k-devel
- none available: Fix deferred
kernel-abi-stablelists as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-abi-stablelists
- none available: Fix deferred
kernel-debug-devel-matched as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug-devel-matched
- none available: Fix deferred
kernel-devel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-devel
- none available: Fix deferred
kernel-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-modules-extra
- none available: Fix deferred
kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-64k-debug
- none available: Fix deferred
kernel-rt-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-64k-debug-modules-extra
- none available: Fix deferred
kernel-rt-core as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-core
- none available: Fix deferred
kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-modules
- none available: Fix deferred
kernel-rt-modules as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-modules
- none available: Fix deferred
kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-tools-libs-devel
- none available: Fix deferred
kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-zfcpdump-devel
- none available: Fix deferred
kernel.src as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel?arch=src
- none available: Fix deferred
rv as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/rv
- none available: Fix deferred
kernel as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00python-perf as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/python-perf
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-rt-debug as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-debug
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel.src as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel?arch=src
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-modules-internal
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-debug-kvm
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-tools-libs as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-tools-libs
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-64k as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-64k
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-64k-modules as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-64k-modules
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-debug-modules-core as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-modules-core
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-modules-extra
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-rt-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-debug-modules-extra
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-debug-devel
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-rt-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-modules-extra
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-zfcpdump-devel
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00rv as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/rv
Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00
All CVSS metrics
- HIGH 7.8 v3.1 · CNA Primary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - HIGH 7.8 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Advisories
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68730.json Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205067 EUVD · EUVD-2025-205067
Technical & other
- https://git.kernel.org/stable/c/9ad57ebd1249c7bbfe9a07ff5e0176dfa320cd62CVE record · Linux · Updated 2026-10-21T12:38:24.802Z
NVD · CVE-2025-68730 · Updated 2026-10-21T13:18:23.950 - https://git.kernel.org/stable/c/8172838a284c27190fa6782c2740a97020434750CVE record · Linux · Updated 2026-10-21T12:38:24.802Z
NVD · CVE-2025-68730 · Updated 2026-10-21T13:18:23.950 - https://git.kernel.org/stable/c/c9ef5ccd8bd9bcf598b6d3f77e7eb4dde7149aecCVE record · Linux · Updated 2026-10-21T12:38:24.802Z
NVD · CVE-2025-68730 · Updated 2026-10-21T13:18:23.950 - https://git.kernel.org/stable/c/8b694b405a84696f1d964f6da7cf9721e68c4714CVE record · Linux · Updated 2026-10-21T12:38:24.802Z
NVD · CVE-2025-68730 · Updated 2026-10-21T13:18:23.950 - https://access.redhat.com/security/cve/CVE-2025-68730 Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2424894 Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00
- https://www.cve.org/CVERecord?id=CVE-2025-68730 Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2025-68730 Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00
- https://lore.kernel.org/linux-cve-announce/2025122406-CVE-2025-68730-c272@gregkh/T Red Hat · CVE-2025-68730 · Updated 2026-07-30T08:33:45+00:00
Sources: NVD · CVE.org · All sources and attribution · EPSS