What is CVE-2025-68326?

CVE-2025-68326 is a unscored severity Linux kernel vulnerability, affecting Linux kernel versions from 6.17 onward and patched in 6.17.11 and 6.18. CVE-2025-68326 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2025-68326?

CVE-2025-68326 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2025-68326?

Yes, CVE-2025-68326 has been patched. Fixed versions include 6.17.11 and 6.18. If you are running Linux kernel 6.17 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2025-68326 actively exploited?

CVE-2025-68326 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2025-68326

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix stack_depot usage Add missing stack_depot_init() call when CONFIG_DRM_XE_DEBUG_GUC is enabled to fix the following call stack: [] BUG: kernel NULL pointer dereference, address: 0000000000000000 [] Workqueue: drm_sched_run_job_work [gpu_sched] [] RIP: 0010:stack_depot_save_flags+0x172/0x870 [] Call Trace: [] <TASK> [] fast_req_track+0x58/0xb0 [xe] (cherry picked from commit 64fdf496a6929a0a194387d2bb5efaf5da2b542f)

Package Linux Kernel

Published 2025-12-22

Last modified 2026-04-15

Patch available

Yes

Affected versions

Linux kernel versions 6.17 and later are affected. Fixed in 6.17.11, 6.18 and their respective stable series.

Affected from

≥ 6.17

Fixed in

✓ 6.17.11 6.17.x ✓ 6.18

References

The following references provide additional information about CVE-2025-68326 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel patch commit
https://git.kernel.org/stable/c/0e234632e39bd21dd28ffc9ba3ae8eec4deb949c
Patch
Kernel patch commit
https://git.kernel.org/stable/c/1966838d1c82149cbf4a652322d26a6e5aae9c4e
Patch

Frequently asked questions

What is CVE-2025-68326?

CVE-2025-68326 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.17 onward and has been patched in 6.17.11 and 6.18. CVE-2025-68326 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2025-68326?

Yes — CVE-2025-68326 has been patched. Fixed versions include 6.17.11 and 6.18. If you are running Linux kernel 6.17 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2025-68326 actively exploited?

No — CVE-2025-68326 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.