{"api_version":"1","generated_at":"2026-10-21T22:12:17+00:00","cve":"CVE-2025-68230","urls":{"html":"https://cve.report/CVE-2025-68230","api":"https://cve.report/api/cve/CVE-2025-68230.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-68230","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-68230"},"summary":{"title":"drm/amdgpu: fix gpu page fault after hibernation on PF passthrough","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix gpu page fault after hibernation on PF passthrough\n\nOn PF passthrough environment, after hibernate and then resume, coralgemm\nwill cause gpu page fault.\n\nMode1 reset happens during hibernate, but partition mode is not restored\non resume, register mmCP_HYP_XCP_CTL and mmCP_PSP_XCP_CTL is not right\nafter resume. When CP access the MQD BO, wrong stride size is used,\nthis will cause out of bound access on the MQD BO, resulting page fault.\n\nThe fix is to ensure gfx_v9_4_3_switch_compute_partition() is called\nwhen resume from a hibernation.\nKFD resume is called separately during a reset recovery or resume from\nsuspend sequence. Hence it's not required to be called as part of\npartition switch.\n\n(cherry picked from commit 5d1b32cfe4a676fe552416cb5ae847b215463a1a)","state":"PUBLISHED","assigner":"Linux","published_at":"2025-12-16 14:15:57","updated_at":"2026-10-21 13:18:21"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/eb6e7f520d6efa4d4ebf1671455abe4a681f7a05","name":"https://git.kernel.org/stable/c/eb6e7f520d6efa4d4ebf1671455abe4a681f7a05","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/a45d6359eefb41e08d374a3260b10bff5626823b","name":"https://git.kernel.org/stable/c/a45d6359eefb41e08d374a3260b10bff5626823b","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/eef72d856f978955e633c270abb1f7ec7b61c6d2","name":"https://git.kernel.org/stable/c/eef72d856f978955e633c270abb1f7ec7b61c6d2","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4","name":"https://git.kernel.org/stable/c/f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68230","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68230","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 955220b04d42c41050158fec0f53957f320b96f9 f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 955220b04d42c41050158fec0f53957f320b96f9 a45d6359eefb41e08d374a3260b10bff5626823b git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 955220b04d42c41050158fec0f53957f320b96f9 eef72d856f978955e633c270abb1f7ec7b61c6d2 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 955220b04d42c41050158fec0f53957f320b96f9 eb6e7f520d6efa4d4ebf1671455abe4a681f7a05 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.5","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.5 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.6.160 6.6.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.60 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.17.10 6.17.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c","drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4","status":"affected","version":"955220b04d42c41050158fec0f53957f320b96f9","versionType":"git"},{"lessThan":"a45d6359eefb41e08d374a3260b10bff5626823b","status":"affected","version":"955220b04d42c41050158fec0f53957f320b96f9","versionType":"git"},{"lessThan":"eef72d856f978955e633c270abb1f7ec7b61c6d2","status":"affected","version":"955220b04d42c41050158fec0f53957f320b96f9","versionType":"git"},{"lessThan":"eb6e7f520d6efa4d4ebf1671455abe4a681f7a05","status":"affected","version":"955220b04d42c41050158fec0f53957f320b96f9","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c","drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.5"},{"lessThan":"6.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.160","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.60","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.18","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.160","versionStartIncluding":"6.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.60","versionStartIncluding":"6.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.17.10","versionStartIncluding":"6.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18","versionStartIncluding":"6.5","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix gpu page fault after hibernation on PF passthrough\n\nOn PF passthrough environment, after hibernate and then resume, coralgemm\nwill cause gpu page fault.\n\nMode1 reset happens during hibernate, but partition mode is not restored\non resume, register mmCP_HYP_XCP_CTL and mmCP_PSP_XCP_CTL is not right\nafter resume. When CP access the MQD BO, wrong stride size is used,\nthis will cause out of bound access on the MQD BO, resulting page fault.\n\nThe fix is to ensure gfx_v9_4_3_switch_compute_partition() is called\nwhen resume from a hibernation.\nKFD resume is called separately during a reset recovery or resume from\nsuspend sequence. Hence it's not required to be called as part of\npartition switch.\n\n(cherry picked from commit 5d1b32cfe4a676fe552416cb5ae847b215463a1a)"}],"providerMetadata":{"dateUpdated":"2026-10-21T12:38:05.802Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4"},{"url":"https://git.kernel.org/stable/c/a45d6359eefb41e08d374a3260b10bff5626823b"},{"url":"https://git.kernel.org/stable/c/eef72d856f978955e633c270abb1f7ec7b61c6d2"},{"url":"https://git.kernel.org/stable/c/eb6e7f520d6efa4d4ebf1671455abe4a681f7a05"}],"title":"drm/amdgpu: fix gpu page fault after hibernation on PF passthrough","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2025-68230","datePublished":"2025-12-16T13:57:22.787Z","dateReserved":"2025-12-16T13:41:40.258Z","dateUpdated":"2026-10-21T12:38:05.802Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-12-16 14:15:57","lastModifiedDate":"2026-10-21 13:18:21","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"68230","Ordinal":"1","Title":"drm/amdgpu: fix gpu page fault after hibernation on PF passthrou","CVE":"CVE-2025-68230","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"68230","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix gpu page fault after hibernation on PF passthrough\n\nOn PF passthrough environment, after hibernate and then resume, coralgemm\nwill cause gpu page fault.\n\nMode1 reset happens during hibernate, but partition mode is not restored\non resume, register mmCP_HYP_XCP_CTL and mmCP_PSP_XCP_CTL is not right\nafter resume. When CP access the MQD BO, wrong stride size is used,\nthis will cause out of bound access on the MQD BO, resulting page fault.\n\nThe fix is to ensure gfx_v9_4_3_switch_compute_partition() is called\nwhen resume from a hibernation.\nKFD resume is called separately during a reset recovery or resume from\nsuspend sequence. Hence it's not required to be called as part of\npartition switch.\n\n(cherry picked from commit 5d1b32cfe4a676fe552416cb5ae847b215463a1a)","Type":"Description","Title":"drm/amdgpu: fix gpu page fault after hibernation on PF passthrou"}]}}}