In the Linux kernel, the following vulnerability has been resolved:
drm/drv: Fix potential memory leak in drm_dev_init()
drm_dev_init() will add drm_dev_init_release() as a callback. When drmm_add_action() failed, the release function won't be added. As the result, the ref cnt added by device_get() in drm_dev_init() won't be put by drm_dev_init_release(), which leads to the memleak. Use drmm_add_action_or_reset() instead of drmm_add_action() to prevent memleak.
unreferenced object 0xffff88810bc0c800 (size 2048): comm "modprobe", pid 8322, jiffies 4305809845 (age 15.292s) hex dump (first 32 bytes): e8 cc c0 0b 81 88 ff ff ff ff ff ff 00 00 00 00 ................ 20 24 3c 0c 81 88 ff ff 18 c8 c0 0b 81 88 ff ff $<............. backtrace: [<000000007251f72d>] __kmalloc+0x4b/0x1c0 [<0000000045f21f26>] platform_device_alloc+0x2d/0xe0 [<000000004452a479>] platform_device_register_full+0x24/0x1c0 [<0000000089f4ea61>] 0xffffffffa0736051 [<00000000235b2441>] do_one_initcall+0x7a/0x380 [<0000000001a4a177>] do_init_module+0x5c/0x230 [<000000002bf8a8e2>] load_module+0x227d/0x2420 [<00000000637d6d0a>] __do_sys_finit_module+0xd5/0x140 [<00000000c99fc324>] do_syscall_64+0x3f/0x90 [<000000004d85aa77>] entry_SYSCALL_64_after_hwframe+0x63/0xcd
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.157-139.675Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64 | Jun 23, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 25, 2025 | Sep 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-awsUpgrade linux-gkeopUpgrade linux-riscv-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-nvidiaUpgrade linux-realtimeUpgrade linux-raspiUpgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-lowlatency | May 8, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub