In the Linux kernel, the following vulnerability has been resolved:
drm/msm/mdp5: Don't leak some plane state
Apparently no one noticed that mdp5 plane states leak like a sieve ever since we introduced plane_state->commit refcount a few years ago in 21a01abbe32a ("drm/atomic: Fix freeing connector/plane state too early by tracking commits, v3.")
Fix it by using the right helpers.
Patchwork: https://patchwork.freedesktop.org/patch/551236/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.196-185.743Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpf-static | Oct 16, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux | Sep 18, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-hwe-5.15Upgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-iotUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linuxUpgrade linux-hwe-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-nvidiaUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-riscv-5.15Upgrade linux-ibm-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-gcpUpgrade linux-gkeopUpgrade linux-realtimeUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-5.15Upgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-aws-5.15Upgrade linux-azure-fipsUpgrade linux-nvidia-tegraUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-ibm | Sep 19, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub