{"id":"CVE-2025-68223","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: delete radeon_fence_process in is_signaled, no deadlock\n\nDelete the attempt to progress the queue when checking if fence is\nsignaled","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: delete radeon_fence_process in is_signaled, no deadlock\n\nDelete the attempt to progress the queue when checking if fence is\nsignaled. This avoids deadlock.\n…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-667"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 3.18, < 6.1.162","linux_kernel >= 6.2, < 6.6.123","linux_kernel >= 6.7, < 6.12.60","linux_kernel >= 6.13, < 6.17.10","linux_kernel = 6.18"],"patched":["linux_kernel 6.17.10"],"published":"2025-12-16","updated":"2026-10-14","sourceUpdated":"2026-10-14T13:10:00.187","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68223","references":[{"url":"https://git.kernel.org/stable/c/73bc12d6a547f9571ce4393acfd73c004e2df9e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7e3e9b3a44c23c8eac86a41308c05077d6d30f41","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9d0ed508a9e2af82951ce7d834f58c139fc2bd9b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9eb00b5f5697bd56baa3222c7a1426fa15bacfb5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d40a72d7e3bad4dfb311ef078f5a57362f088c7f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd"],"epss":0.00116,"epssPercentile":0.01513,"ingestedAt":"2026-10-14T13:30:58.459Z","slug":"CVE-2025-68223","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: delete radeon_fence_process in is_signaled, no deadlock\n\nDelete the attempt to progress the queue when checking if fence is\nsignaled. This avoids deadlock.\n\ndma-fence_ops::signaled can be called with the fence lock in unknown\nstate. For radeon, the fence lock is also the wait queue lock. This can\ncause a self deadlock when signaled() tries to make forward progress on\nthe wait queue. But advancing the queue is unneeded because incorrectly\nreturning false from signaled() is perfectly acceptable.\n\n(cherry picked from commit 527ba26e50ec2ca2be9c7c82f3ad42998a75d0db)\n\n## Affected\n\n- `linux_kernel >= 3.18, < 6.1.162`\n- `linux_kernel >= 6.2, < 6.6.123`\n- `linux_kernel >= 6.7, < 6.12.60`\n- `linux_kernel >= 6.13, < 6.17.10`\n- `linux_kernel = 6.18`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.17.10`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}