In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix several DMA buffer leaks
Nouveau manages GSP-RM DMA buffers with nvkm_gsp_mem objects. Several of these buffers are never dealloced. Some of them can be deallocated right after GSP-RM is initialized, but the rest need to stay until the driver unloads.
Also futher bullet-proof these objects by poisoning the buffer and clearing the nvkm_gsp_mem object when it is deallocated. Poisoning the buffer should trigger an error (or crash) from GSP-RM if it tries to access the buffer after we've deallocated it, because we were wrong about when it is safe to deallocate.
Finally, change the mem->size field to a size_t because that's the same type that dma_alloc_coherent expects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-syms | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub