In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Handle dml allocation failure to avoid crash
[Why] In the case where a dml allocation fails for any reason, the current state's dml contexts would no longer be valid. Then subsequent calls dc_state_copy_internal would shallow copy invalid memory and if the new state was released, a double free would occur.
[How] Reset dml pointers in new_state to NULL and avoid invalid pointer
(cherry picked from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Dec 4, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1028-gcp-64k | Feb 20, 2025 | Dec 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub