Memory Management Vulnerability in Linux Kernel Affects NVIDIA Products

CVE-2025-68233

What is CVE-2025-68233?

A memory management vulnerability has been identified in the Linux kernel, specifically related to the drm/tegra module. The issue arises from the host1x_memory_context_alloc() function, which fails to release the Process ID (PID) as expected, thus leading to potential PID leaks. This vulnerability highlights the importance of proper PID handling to prevent resource leaks and ensure system stability. A call to put_pid() is needed to complement the existing get_task_pid() function, allowing for the appropriate freeing of memory resources.

References