In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Handle dml allocation failure to avoid crash
[Why] In the case where a dml allocation fails for any reason, the current state's dml contexts would no longer be valid. Then subsequent calls dc_state_copy_internal would shallow copy invalid memory and if the new state was released, a double free would occur.
[How] Reset dml pointers in new_state to NULL and avoid invalid pointer
(cherry picked from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Dec 4, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oracle-64k | Feb 20, 2025 | Dec 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub