In the Linux kernel, the following vulnerability has been resolved:
drm/i915/huc: Fix fence not released on early probe errors
HuC delayed loading fence, introduced with commit 27536e03271da ("drm/i915/huc: track delayed HuC load with a fence"), is registered with object tracker early on driver probe but unregistered only from driver remove, which is not called on early probe errors. Since its memory is allocated under devres, then released anyway, it may happen to be allocated again to the fence and reused on future driver probes, resulting in kernel warnings that taint the kernel:
<4> [309.731371] ------------[ cut here ]------------ <3> [309.731373] ODEBUG: init destroyed (active state 0) object: ffff88813d7dd2e0 object type: i915_sw_fence hint: sw_fence_dummy_notify+0x0/0x20 [i915] <4> [309.731575] WARNING: CPU: 2 PID: 3161 at lib/debugobjects.c:612 debug_print_object+0x93/0xf0 ... <4> [309.731693] CPU: 2 UID: 0 PID: 3161 Comm: i915_module_loa Tainted: G U 6.14.0-CI_DRM_16362-gf0fd77956987+ #1 ... <4> [309.731700] RIP: 0010:debug_print_object+0x93/0xf0 ... <4> [309.731728] Call Trace: <4> [309.731730] <TASK> ... <4> [309.731949] __debug_object_init+0x17b/0x1c0 <4> [309.731957] debug_object_init+0x34/0x50 <4> [309.732126] __i915_sw_fence_init+0x34/0x60 [i915] <4> [309.732256] intel_huc_init_early+0x4b/0x1d0 [i915] <4> [309.732468] intel_uc_init_early+0x61/0x680 [i915] <4> [309.732667] intel_gt_common_init_early+0x105/0x130 [i915] <4> [309.732804] intel_root_gt_init_early+0x63/0x80 [i915] <4> [309.732938] i915_driver_probe+0x1fa/0xeb0 [i915] <4> [309.733075] i915_pci_probe+0xe6/0x220 [i915] <4> [309.733198] local_pci_probe+0x44/0xb0 <4> [309.733203] pci_device_probe+0xf4/0x270 <4> [309.733209] really_probe+0xee/0x3c0 <4> [309.733215] __driver_probe_device+0x8c/0x180 <4> [309.733219] driver_probe_device+0x24/0xd0 <4> [309.733223] __driver_attach+0x10f/0x220 <4> [309.733230] bus_for_each_dev+0x7d/0xe0 <4> [309.733236] driver_attach+0x1e/0x30 <4> [309.733239] bus_add_driver+0x151/0x290 <4> [309.733244] driver_register+0x5e/0x130 <4> [309.733247] __pci_register_driver+0x7d/0x90 <4> [309.733251] i915_pci_register_driver+0x23/0x30 [i915] <4> [309.733413] i915_init+0x34/0x120 [i915] <4> [309.733655] do_one_initcall+0x62/0x3f0 <4> [309.733667] do_init_module+0x97/0x2a0 <4> [309.733671] load_module+0x25ff/0x2890 <4> [309.733688] init_module_from_file+0x97/0xe0 <4> [309.733701] idempotent_init_module+0x118/0x330 <4> [309.733711] __x64_sys_finit_module+0x77/0x100 <4> [309.733715] x64_sys_call+0x1f37/0x2650 <4> [309.733719] do_syscall_64+0x91/0x180 <4> [309.733763] entry_SYSCALL_64_after_hwframe+0x76/0x7e <4> [309.733792] </TASK> ... <4> [309.733806] ---[ end trace 0000000000000000 ]---
That scenario is most easily reproducible with igt@i915_module_load@reload-with-fault-injection.
Fix the issue by moving the cleanup step to driver release path.
(cherry picked from commit 795dbde92fe5c6996a02a5b579481de73035e7bf)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-develUpgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-tools-debuginfo | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-default-devel | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fdeUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-xilinxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-fips | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub