In the Linux kernel, the following vulnerability has been resolved:
drm/vkms: Fix memory leak in vkms_init()
A memory leak was reported after the vkms module install failed.
unreferenced object 0xffff88810bc28520 (size 16): comm "modprobe", pid 9662, jiffies 4298009455 (age 42.590s) hex dump (first 16 bytes): 01 01 00 64 81 88 ff ff 00 00 dc 0a 81 88 ff ff ...d............ backtrace: [<00000000e7561ff8>] kmalloc_trace+0x27/0x60 [<000000000b1954a0>] 0xffffffffc45200a9 [<00000000abbf1da0>] do_one_initcall+0xd0/0x4f0 [<000000001505ee87>] do_init_module+0x1a4/0x680 [<00000000958079ad>] load_module+0x6249/0x7110 [<00000000117e4696>] __do_sys_finit_module+0x140/0x200 [<00000000f74b12d2>] do_syscall_64+0x35/0x80 [<000000008fc6fcde>] entry_SYSCALL_64_after_hwframe+0x46/0xb0
The reason is that the vkms_init() returns without checking the return value of vkms_create(), and if the vkms_create() failed, the config allocated at the beginning of vkms_init() is leaked.
vkms_init() config = kmalloc(...) # config allocated ... return vkms_create() # vkms_create failed and config is leaked
Fix this problem by checking return value of vkms_create() and free the config if error happened.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 14, 2025 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-oracleUpgrade linux-azureUpgrade linux-riscv-5.15Upgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iotgUpgrade linux-raspiUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-nvidia-tegraUpgrade linux-gkeUpgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-realtimeUpgrade linux-awsUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-bluefield | Sep 19, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub