Riskcovery

CVE-2025-21995

drm/sched: Fix fence reference count leak

State
Published
Severity
5.5 Medium
Published
Apr 3, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/sched: Fix fence reference count leak

The last_scheduled fence leaks when an entity is being killed and adding the cleanup callback fails.

Decrement the reference count of prev when dma_fence_add_callback() fails, ensuring proper balance.

[phasta: add git tag info for stable kernel]

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2fdb8a8f07c2f1353770a324fd19b8114e4329ac to before c76bd3c99293834de7d1dca5de536616d5655e38Affected
  • 2fdb8a8f07c2f1353770a324fd19b8114e4329ac to before 1135a9431160575466ea9ac37ebd756ecbe35fffAffected
  • 2fdb8a8f07c2f1353770a324fd19b8114e4329ac to before 35399c84dcedd6d31448fb9e1336ef52673f2882Affected
  • 2fdb8a8f07c2f1353770a324fd19b8114e4329ac to before a952f1ab696873be124e31ce5ef964d36bce817fAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.85 through 6.6.*Not affected
  • 6.12.21 through 6.12.*Not affected
  • 6.13.9 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.