CVE-2025-68798Time-of-check Time-of-use (TOCTOU) Race Condition in Linux

Severity
6.4MEDIUM
No vector
EPSS
0.0%
top 88.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 13
Latest updateApr 17

Description

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->events[idx] can become NULL in a subtle race condition with NMI->throttle->x86_pmu_stop(). Check event for NULL in amd_pmu_enable_all() before enable to avoid a GPF. This appears to be an AMD only issue. Syzkaller reported a GPF in amd_pmu_enable_all. INFO: NMI handler (perf_event_nmi_handler) took too long to run: 13.143 msecs Oops: general protecti

Affected Packages15 packages

Linuxlinux/linux_kernel5.19.06.1.160+3
Debianlinux/linux_kernel< 6.1.162-1+2
CVEListV5linux/linuxada543459cab7f653dcacdaba4011a8bb19c627c49324a0c40f7e9bae1bd0362d23fc42232e14621+5
debiandebian/linux< linux 6.1.162-1 (bookworm)
debiandebian/linux-6.1< linux 6.1.162-1 (bookworm)

🔴Vulnerability Details

3
OSV
perf/x86/amd: Check event before enable to avoid GPF2026-01-13
GHSA
GHSA-v753-hw9q-p9vj: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->event2026-01-13
OSV
CVE-2025-68798: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->events[2026-01-13

📋Vendor Advisories

9
Ubuntu
Linux kernel (GCP) vulnerabilities2026-04-17
Ubuntu
Linux kernel (FIPS) vulnerabilities2026-04-17
Ubuntu
Linux kernel (Real-time) vulnerabilities2026-04-17
Ubuntu
Linux kernel (Real-time) vulnerabilities2026-04-17
Ubuntu
Linux kernel (NVIDIA) vulnerabilities2026-04-17

🕵️Threat Intelligence

1
Wiz
CVE-2025-68798 Impact, Exploitability, and Mitigation Steps | Wiz