CVE-2025-22097
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
drm/vkms: Fix use after free and double free on init error
If the driver initialization fails, the vkms_exit() function might access an uninitialized or freed default_config pointer and it might double free it.
Fix both possible errors by initializing default_config only when the driver initialization succeeded.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 < 49a69f67f53518bdd9b7eeebf019a2da6cc0e954 | affected |
| Linux | Linux | 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 < 79d138d137b80eeb0a83244d1cff29e64cf91067 | affected |
| Linux | Linux | 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 < 561fc0c5cf41f646f3e9e61784cbc0fc832fb936 | affected |
| Linux | Linux | 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 < d5eb8e347905ab17788a7903fa1d3d06747355f5 | affected |
| Linux | Linux | 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 < b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 | affected |
| Linux | Linux | 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 < 1f68f1cf09d06061eb549726ff8339e064eddebd | affected |
| Linux | Linux | 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 < ed15511a773df86205bda66c37193569575ae828 | affected |
| Linux | Linux | 5.12 | affected |
| Linux | Linux | 0 < 5.12 | unaffected |
| Linux | Linux | 5.15.180 <= 5.15.* | unaffected |
| Linux | Linux | 6.1.134 <= 6.1.* | unaffected |
| Linux | Linux | 6.6.87 <= 6.6.* | unaffected |
| Linux | Linux | 6.12.23 <= 6.12.* | unaffected |
| Linux | Linux | 6.13.11 <= 6.13.* | unaffected |
| Linux | Linux | 6.14.2 <= 6.14.* | unaffected |
| Linux | Linux | 6.15 <= * | unaffected |
Weaknesses
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
CVE Program Container
Additional References
References
- https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954
- https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067
- https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936
- https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5
- https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853
- https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd
- https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.