Riskcovery

CVE-2025-38409

drm/msm: Fix another leak in the submit error path

State
Published
Severity
Not scored
Published
Jul 25, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: Fix another leak in the submit error path

put_unused_fd() doesn't free the installed file, if we've already done fd_install(). So we need to also free the sync_file.

Patchwork: https://patchwork.freedesktop.org/patch/653583/

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 00b3401f692082ddf6342500d1be25560bba46d4Affected
  • 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before c40ad1c04d306f7fde26337fdcf8a5979657d93fAffected
  • 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 3f6ce8433a9035b0aa810e1f5b708e9dc1c367b0Affected
  • 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 30d3819b0b9173e31b84d662a592af8bad351427Affected
  • 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before f681c2aa8676a890eacc84044717ab0fd26e058fAffected
LinuxLinux
  • 3.12Affected
  • before 3.12Not affected
  • 6.1.144 through 6.1.*Not affected
  • 6.6.97 through 6.6.*Not affected
  • 6.12.37 through 6.12.*Not affected
  • 6.15.6 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.