In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix several DMA buffer leaks
Nouveau manages GSP-RM DMA buffers with nvkm_gsp_mem objects. Several of these buffers are never dealloced. Some of them can be deallocated right after GSP-RM is initialized, but the rest need to stay until the driver unloads.
Also futher bullet-proof these objects by poisoning the buffer and clearing the nvkm_gsp_mem object when it is deallocated. Poisoning the buffer should trigger an error (or crash) from GSP-RM if it tries to access the buffer after we've deallocated it, because we were wrong about when it is safe to deallocate.
Finally, change the mem->size field to a size_t because that's the same type that dma_alloc_coherent expects.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kernel-obs-qa | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub