In the Linux kernel, the following vulnerability has been resolved:
drm/msm/mdp5: Don't leak some plane state
Apparently no one noticed that mdp5 plane states leak like a sieve ever since we introduced plane_state->commit refcount a few years ago in 21a01abbe32a ("drm/atomic: Fix freeing connector/plane state too early by tracking commits, v3.")
Fix it by using the right helpers.
Patchwork: https://patchwork.freedesktop.org/patch/551236/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Oct 16, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux | Sep 18, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-hwe-5.15Upgrade linux-gcp-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.4Upgrade linux-bluefieldUpgrade linux-ibm-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-awsUpgrade linuxUpgrade linux-nvidia-tegra-igxUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-azure-5.15Upgrade linux-gkeUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-nvidia-tegraUpgrade linux-xilinx-zynqmpUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-riscv-5.15Upgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-intel-iotgUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-aws-5.15Upgrade linux-ibm-5.15Upgrade linux-kvm | Sep 19, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub