CVE-2025-21995

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21995
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix fence reference count leak The last_scheduled fence leaks when an entity is being killed and adding the cleanup callback fails. Decrement the reference count of prev when dma_fence_add_callback() fails, ensuring proper balance. [phasta: add git tag info for stable kernel]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1135a9431160575466ea9ac37ebd756ecbe35fff Patch
https://git.kernel.org/stable/c/35399c84dcedd6d31448fb9e1336ef52673f2882 Patch
https://git.kernel.org/stable/c/a952f1ab696873be124e31ce5ef964d36bce817f Patch
https://git.kernel.org/stable/c/c76bd3c99293834de7d1dca5de536616d5655e38 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc7:*:*:*:*:*:*
History

14 Apr 2025, 12:35

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.14:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/1135a9431160575466ea9ac37ebd756ecbe35fff - () https://git.kernel.org/stable/c/1135a9431160575466ea9ac37ebd756ecbe35fff - Patch
References () https://git.kernel.org/stable/c/35399c84dcedd6d31448fb9e1336ef52673f2882 - () https://git.kernel.org/stable/c/35399c84dcedd6d31448fb9e1336ef52673f2882 - Patch
References () https://git.kernel.org/stable/c/a952f1ab696873be124e31ce5ef964d36bce817f - () https://git.kernel.org/stable/c/a952f1ab696873be124e31ce5ef964d36bce817f - Patch
References () https://git.kernel.org/stable/c/c76bd3c99293834de7d1dca5de536616d5655e38 - () https://git.kernel.org/stable/c/c76bd3c99293834de7d1dca5de536616d5655e38 - Patch

07 Apr 2025, 14:18

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/sched: Se corrige la fuga del recuento de referencias de la valla. La valla last_scheduled se filtra cuando se elimina una entidad y falla la devolución de llamada de limpieza. Se reduce el recuento de referencias de prev cuando dma_fence_add_callback() falla, asegurando un equilibrio adecuado. [phasta: se añade información de la etiqueta Git para el kernel estable]

03 Apr 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-03 08:15

Updated : 2025-04-14 12:35

NVD link : CVE-2025-21995

Mitre link : CVE-2025-21995

CVE.ORG link : CVE-2025-21995

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other