In the Linux kernel, the following vulnerability has been resolved:
drm/i915/huc: Fix fence not released on early probe errors
HuC delayed loading fence, introduced with commit 27536e03271da ("drm/i915/huc: track delayed HuC load with a fence"), is registered with object tracker early on driver probe but unregistered only from driver remove, which is not called on early probe errors. Since its memory is allocated under devres, then released anyway, it may happen to be allocated again to the fence and reused on future driver probes, resulting in kernel warnings that taint the kernel:
<4> [309.731371] ------------[ cut here ]------------ <3> [309.731373] ODEBUG: init destroyed (active state 0) object: ffff88813d7dd2e0 object type: i915_sw_fence hint: sw_fence_dummy_notify+0x0/0x20 [i915] <4> [309.731575] WARNING: CPU: 2 PID: 3161 at lib/debugobjects.c:612 debug_print_object+0x93/0xf0 ... <4> [309.731693] CPU: 2 UID: 0 PID: 3161 Comm: i915_module_loa Tainted: G U 6.14.0-CI_DRM_16362-gf0fd77956987+ #1 ... <4> [309.731700] RIP: 0010:debug_print_object+0x93/0xf0 ... <4> [309.731728] Call Trace: <4> [309.731730] <TASK> ... <4> [309.731949] __debug_object_init+0x17b/0x1c0 <4> [309.731957] debug_object_init+0x34/0x50 <4> [309.732126] __i915_sw_fence_init+0x34/0x60 [i915] <4> [309.732256] intel_huc_init_early+0x4b/0x1d0 [i915] <4> [309.732468] intel_uc_init_early+0x61/0x680 [i915] <4> [309.732667] intel_gt_common_init_early+0x105/0x130 [i915] <4> [309.732804] intel_root_gt_init_early+0x63/0x80 [i915] <4> [309.732938] i915_driver_probe+0x1fa/0xeb0 [i915] <4> [309.733075] i915_pci_probe+0xe6/0x220 [i915] <4> [309.733198] local_pci_probe+0x44/0xb0 <4> [309.733203] pci_device_probe+0xf4/0x270 <4> [309.733209] really_probe+0xee/0x3c0 <4> [309.733215] __driver_probe_device+0x8c/0x180 <4> [309.733219] driver_probe_device+0x24/0xd0 <4> [309.733223] __driver_attach+0x10f/0x220 <4> [309.733230] bus_for_each_dev+0x7d/0xe0 <4> [309.733236] driver_attach+0x1e/0x30 <4> [309.733239] bus_add_driver+0x151/0x290 <4> [309.733244] driver_register+0x5e/0x130 <4> [309.733247] __pci_register_driver+0x7d/0x90 <4> [309.733251] i915_pci_register_driver+0x23/0x30 [i915] <4> [309.733413] i915_init+0x34/0x120 [i915] <4> [309.733655] do_one_initcall+0x62/0x3f0 <4> [309.733667] do_init_module+0x97/0x2a0 <4> [309.733671] load_module+0x25ff/0x2890 <4> [309.733688] init_module_from_file+0x97/0xe0 <4> [309.733701] idempotent_init_module+0x118/0x330 <4> [309.733711] __x64_sys_finit_module+0x77/0x100 <4> [309.733715] x64_sys_call+0x1f37/0x2650 <4> [309.733719] do_syscall_64+0x91/0x180 <4> [309.733763] entry_SYSCALL_64_after_hwframe+0x76/0x7e <4> [309.733792] </TASK> ... <4> [309.733806] ---[ end trace 0000000000000000 ]---
That scenario is most easily reproducible with igt@i915_module_load@reload-with-fault-injection.
Fix the issue by moving the cleanup step to driver release path.
(cherry picked from commit 795dbde92fe5c6996a02a5b579481de73035e7bf)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel6.12Upgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpfUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-tools-devel | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprd | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinxUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-virtualUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-genericUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtime-6.8 | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub