The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/huc: Fix fence not released on early probe errors
HuC delayed loading fence, introduced with commit 27536e03271da ("drm/i915/huc: track delayed HuC load with a fence"), is registered with object tracker early on driver probe but unregistered only from driver remove, which is not called on early probe errors. Since its memory is allocated under devres, then released anyway, it may happen to be allocated again to the fence and reused on future driver probes, resulting in kernel warnings that taint the kernel:
<4> [309.731371] ------------[ cut here ]------------ <3> [309.731373] ODEBUG: init destroyed (active state 0) object: ffff88813d7dd2e0 object type: i915_sw_fence hint: sw_fence_dummy_notify+0x0/0x20 [i915] <4> [309.731575] WARNING: CPU: 2 PID: 3161 at lib/debugobjects.c:612 debug_print_object+0x93/0xf0 ... <4> [309.731693] CPU: 2 UID: 0 PID: 3161 Comm: i915_module_loa Tainted: G U 6.14.0-CI_DRM_16362-gf0fd77956987+ #1 ... <4> [309.731700] RIP: 0010:debug_print_object+0x93/0xf0 ... <4> [309.731728] Call Trace: <4> [309.731730] <TASK> ... <4> [309.731949] __debug_object_init+0x17b/0x1c0 <4> [309.731957] debug_object_init+0x34/0x50 <4> [309.732126] __i915_sw_fence_init+0x34/0x60 [i915] <4> [309.732256] intel_huc_init_early+0x4b/0x1d0 [i915] <4> [309.732468] intel_uc_init_early+0x61/0x680 [i915] <4> [309.732667] intel_gt_common_init_early+0x105/0x130 [i915] <4> [309.732804] intel_root_gt_init_early+0x63/0x80 [i915] <4> [309.732938] i915_driver_probe+0x1fa/0xeb0 [i915] <4> [309.733075] i915_pci_probe+0xe6/0x220 [i915] <4> [309.733198] local_pci_probe+0x44/0xb0 <4> [309.733203] pci_device_probe+0xf4/0x270 <4> [309.733209] really_probe+0xee/0x3c0 <4> [309.733215] __driver_probe_device+0x8c/0x180 <4> [309.733219] driver_probe_device+0x24/0xd0 <4> [309.733223] __driver_attach+0x10f/0x220 <4> [309.733230] bus_for_each_dev+0x7d/0xe0 <4> [309.733236] driver_attach+0x1e/0x30 <4> [309.733239] bus_add_driver+0x151/0x290 <4> [309.733244] driver_register+0x5e/0x130 <4> [309.733247] __pci_register_driver+0x7d/0x90 <4> [309.733251] i915_pci_register_driver+0x23/0x30 [i915] <4> [309.733413] i915_init+0x34/0x120 [i915] <4> [309.733655] do_one_initcall+0x62/0x3f0 <4> [309.733667] do_init_module+0x97/0x2a0 <4> [309.733671] load_module+0x25ff/0x2890 <4> [309.733688] init_module_from_file+0x97/0xe0 <4> [309.733701] idempotent_init_module+0x118/0x330 <4> [309.733711] __x64_sys_finit_module+0x77/0x100 <4> [309.733715] x64_sys_call+0x1f37/0x2650 <4> [309.733719] do_syscall_64+0x91/0x180 <4> [309.733763] entry_SYSCALL_64_after_hwframe+0x76/0x7e <4> [309.733792] </TASK> ... <4> [309.733806] ---[ end trace 0000000000000000 ]---
That scenario is most easily reproducible with igt@i915_module_load@reload-with-fault-injection.
Fix the issue by moving the cleanup step to driver release path.
(cherry picked from commit 795dbde92fe5c6996a02a5b579481de73035e7bf)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel6.12Upgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-static | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-azure-vdso | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gkeopUpgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-xilinxUpgrade linux-image-virtualUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-22-generic | Jun 26, 2025 | May 1, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub