Description
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BOs list before it gets unmapped. Then file_priv_unbind() triggers a warning in drm_mm_takedown() during context teardown. Protect the unmapping sequence with bo_list_lock to ensure the BO is always fully unmapped when removed from the list. This ensures the BO is either fully unmapped at context teardown time or present on the list and unmapped by file_priv_unbind().
Product status
48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 (git) before fb16493ebd8f171bcf0772262619618a131f30f7
48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 (git) before d71333ffdd3707d84cfb95acfaf8ba892adc066b
48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 (git) before 00812636df370bedf4e44a0c81b86ea96bca8628
6.8
Any version before 6.8
6.17.13 (semver)
6.18.2 (semver)
6.19-rc1 (original_commit_for_fix)
References
git.kernel.org/...c/fb16493ebd8f171bcf0772262619618a131f30f7
git.kernel.org/...c/d71333ffdd3707d84cfb95acfaf8ba892adc066b
git.kernel.org/...c/00812636df370bedf4e44a0c81b86ea96bca8628
Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.