In the Linux kernel, the following vulnerability has been resolved:
drm/xe/nvm: Fix double-free on aux add failure
After a successful auxiliary_device_init(), aux_dev->dev.release (xe_nvm_release_dev()) is responsible for the kfree(nvm). When there is failure with auxiliary_device_add(), driver will call auxiliary_device_uninit(), which call put_device(). So that the .release callback will be triggered to free the memory associated with the auxiliary_device.
Move the kfree(nvm) into the auxiliary_device_init() failure path and remove the err goto path to fix below error.
" [ 13.232905] ================================================================== [ 13.232911] BUG: KASAN: double-free in xe_nvm_init+0x751/0xf10 [xe] [ 13.233112] Free of addr ffff888120635000 by task systemd-udevd/273
[ 13.233120] CPU: 8 UID: 0 PID: 273 Comm: systemd-udevd Not tainted 6.19.0-rc2-lgci-xe-kernel+ #225 PREEMPT(voluntary) ... [ 13.233125] Call Trace: [ 13.233126] <TASK> [ 13.233127] dump_stack_lvl+0x7f/0xc0 [ 13.233132] print_report+0xce/0x610 [ 13.233136] ? kasan_complete_mode_report_info+0x5d/0x1e0 [ 13.233139] ? xe_nvm_init+0x751/0xf10 [xe] ... "
v2: drop err goto path. (Alexander)
(cherry picked from commit a3187c0c2bbd947ffff97f90d077ac88f9c2a215)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.17Upgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-nvidia-6.17Upgrade linux-image-oracleUpgrade linux-image-azure-fde-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-oracle-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-6.17Upgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-oem-24.04d | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub