5.5

CVE-2025-38410

drm/msm: Fix a fence leak in submit error path

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: Fix a fence leak in submit error path

In error paths, we could unref the submit without calling
drm_sched_entity_push_job(), so msm_job_free() will never get
called.  Since drm_sched_job_cleanup() will NULL out the
s_fence, we can use that to detect this case.

Patchwork: https://patchwork.freedesktop.org/patch/653584/
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.12 < 5.15.187
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.144
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.97
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.37
Linux ≫ Linux Kernel Version >= 6.13 < 6.15.6
Linux ≫ Linux Kernel Version6.16 Updaterc1
Linux ≫ Linux Kernel Version6.16 Updaterc2
Debian ≫ Debian Linux Version11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.051
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/0dc817f852e5f8ec8501d19ef7dcc01affa181d0
Patch
https://git.kernel.org/stable/c/0eaa495b3d5710e5ba72051d2e01bb28292c625c
Patch
https://git.kernel.org/stable/c/201eba5c9652a900c0b248070263f9acd3735689
Patch
https://git.kernel.org/stable/c/5d319f75ccf7f0927425a7545aa1a22b3eedc189
Patch
https://git.kernel.org/stable/c/5deab0fa6cfd0cd7def17598db15ceb84f950584
Patch
https://git.kernel.org/stable/c/fe2695b2f63bd77e0e03bc0fc779164115bb4699
Patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
Third Party Advisory