CVE-2025-68798

Published Jan 13, 2026

Overview

CVE-2025-68798 is a known-severity vulnerability. It was published on January 13, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

perf/x86/amd: Check event before enable to avoid GPF

On AMD machines cpuc->events[idx] can become NULL in a subtle race

condition with NMI->throttle->x86_pmu_stop().

Check event for NULL in amd_pmu_enable_all() before enable to avoid a GPF.

This appears to be an AMD only issue.

Syzkaller reported a GPF in amd_pmu_enable_all.

INFO: NMI handler (perf_event_nmi_handler) took too long to run: 13.143

msecs

Oops: general protection fault, probably for non-canonical address

0xdffffc0000000034: 0000 PREEMPT SMP KASAN NOPTI

KASAN: null-ptr-deref in range [0x00000000000001a0-0x00000000000001a7]

CPU: 0 UID: 0 PID: 328415 Comm: repro_36674776 Not tainted 6.12.0-rc1-syzk

RIP: 0010:x86_pmu_enable_event (arch/x86/events/perf_event.h:1195

arch/x86/events/core.c:1430)

RSP: 0018:ffff888118009d60 EFLAGS: 00010012

RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000

RDX: 0000000000000034 RSI: 000000000000000

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/43c2e5c2acaae50e99d1c20a5a46e367c442fb3b Ref git.kernel.org/stable/c/49324a0c40f7e9bae1bd0362d23fc42232e14621 Ref git.kernel.org/stable/c/6e41d9ec8d7cc3f01b9ba785e05f0ebef8b3b37f Ref git.kernel.org/stable/c/866cf36bfee4fba6a492d2dcc5133f857e3446b0 Ref git.kernel.org/stable/c/e1028fb38b328084bc683a4efb001c95d3108573 Ref cert-portal.siemens.com/productcert/html/ssa-019113.html

Frequently Asked Questions

What is CVE-2025-68798?

CVE-2025-68798 is a known-severity vulnerability. It was published on January 13, 2026.

How severe is CVE-2025-68798?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2025-68798?

How can CyberStrike help with CVE-2025-68798?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-68798 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.