In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd: pmf: Use device managed allocations
If setting up smart PC fails for any reason then this can lead to a double free when unloading amd-pmf. This is because dev->buf was freed but never set to NULL and is again freed in amd_pmf_remove().
To avoid subtle allocation bugs in failures leading to a double free change all allocations into device managed allocations.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade dtb-alteraUpgrade dtb-armUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade dtb-qcomUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kb | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-generic-6.14Upgrade linux-image-generic-64kUpgrade linux-image-awsUpgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-virtualUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1015-oracle-64k | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub