In the Linux kernel, the following vulnerability has been resolved:
drm/i915/huc: Fix fence not released on early probe errors
HuC delayed loading fence, introduced with commit 27536e03271da ("drm/i915/huc: track delayed HuC load with a fence"), is registered with object tracker early on driver probe but unregistered only from driver remove, which is not called on early probe errors. Since its memory is allocated under devres, then released anyway, it may happen to be allocated again to the fence and reused on future driver probes, resulting in kernel warnings that taint the kernel:
<4> [309.731371] ------------[ cut here ]------------ <3> [309.731373] ODEBUG: init destroyed (active state 0) object: ffff88813d7dd2e0 object type: i915_sw_fence hint: sw_fence_dummy_notify+0x0/0x20 [i915] <4> [309.731575] WARNING: CPU: 2 PID: 3161 at lib/debugobjects.c:612 debug_print_object+0x93/0xf0 ... <4> [309.731693] CPU: 2 UID: 0 PID: 3161 Comm: i915_module_loa Tainted: G U 6.14.0-CI_DRM_16362-gf0fd77956987+ #1 ... <4> [309.731700] RIP: 0010:debug_print_object+0x93/0xf0 ... <4> [309.731728] Call Trace: <4> [309.731730] <TASK> ... <4> [309.731949] __debug_object_init+0x17b/0x1c0 <4> [309.731957] debug_object_init+0x34/0x50 <4> [309.732126] __i915_sw_fence_init+0x34/0x60 [i915] <4> [309.732256] intel_huc_init_early+0x4b/0x1d0 [i915] <4> [309.732468] intel_uc_init_early+0x61/0x680 [i915] <4> [309.732667] intel_gt_common_init_early+0x105/0x130 [i915] <4> [309.732804] intel_root_gt_init_early+0x63/0x80 [i915] <4> [309.732938] i915_driver_probe+0x1fa/0xeb0 [i915] <4> [309.733075] i915_pci_probe+0xe6/0x220 [i915] <4> [309.733198] local_pci_probe+0x44/0xb0 <4> [309.733203] pci_device_probe+0xf4/0x270 <4> [309.733209] really_probe+0xee/0x3c0 <4> [309.733215] __driver_probe_device+0x8c/0x180 <4> [309.733219] driver_probe_device+0x24/0xd0 <4> [309.733223] __driver_attach+0x10f/0x220 <4> [309.733230] bus_for_each_dev+0x7d/0xe0 <4> [309.733236] driver_attach+0x1e/0x30 <4> [309.733239] bus_add_driver+0x151/0x290 <4> [309.733244] driver_register+0x5e/0x130 <4> [309.733247] __pci_register_driver+0x7d/0x90 <4> [309.733251] i915_pci_register_driver+0x23/0x30 [i915] <4> [309.733413] i915_init+0x34/0x120 [i915] <4> [309.733655] do_one_initcall+0x62/0x3f0 <4> [309.733667] do_init_module+0x97/0x2a0 <4> [309.733671] load_module+0x25ff/0x2890 <4> [309.733688] init_module_from_file+0x97/0xe0 <4> [309.733701] idempotent_init_module+0x118/0x330 <4> [309.733711] __x64_sys_finit_module+0x77/0x100 <4> [309.733715] x64_sys_call+0x1f37/0x2650 <4> [309.733719] do_syscall_64+0x91/0x180 <4> [309.733763] entry_SYSCALL_64_after_hwframe+0x76/0x7e <4> [309.733792] </TASK> ... <4> [309.733806] ---[ end trace 0000000000000000 ]---
That scenario is most easily reproducible with igt@i915_module_load@reload-with-fault-injection.
Fix the issue by moving the cleanup step to driver release path.
(cherry picked from commit 795dbde92fe5c6996a02a5b579481de73035e7bf)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel-develUpgrade kernel-livepatch-6.12.25-32.101Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade bpftoolUpgrade kernel-tools | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-armUpgrade dtb-lgUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extra | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidiaUpgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gke-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-kvmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-xilinxUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fips-6.8 | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub