Riskcovery

CVE-2025-68252

misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
May 11, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup

In fastrpc_map_lookup, dma_buf_get is called to obtain a reference to the dma_buf for comparison purposes. However, this reference is never released when the function returns, leading to a dma_buf memory leak.

Fix this by adding dma_buf_put before returning from the function, ensuring that the temporarily acquired reference is properly released regardless of whether a matching map is found.

Rule: add

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ec5cb80503bbfee67573699fe52fcf456fd57678 to before c2fef5ebb73f3dabae6fbc571d181914ed32c483Affected
  • 6e0d6cc39f410a4d9ea774fbb254c68fe02ff4bb to before 9a297a68c3ba4a7ecb31ed52f61bd6634abb79d3Affected
  • 6e0928a8988e873da9946e17f8065ad77c720186 to before e17b13387827adce7acb19ac0f07f9bcafe0ff4cAffected
  • 1986bba9597b3d97d3e80530dc457a1cd1994e22 to before 214e81a63a9aa0be42382ef0365ba5ed32c513abAffected
  • 9031626ade38b092b72638dfe0c6ffce8d8acd43 to before fff111bf45cbeeb659324316d68554e35d350092Affected
LinuxLinux
  • 6.1.156 to before 6.1.158Affected
  • 6.6.112 to before 6.6.115Affected
  • 6.12.53 to before 6.12.56Affected
  • 6.17.3 to before 6.17.6Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.