CVE-2025-38449
NoneCVSS
—
EPSS
0.2%
Published
Jul 25, 2025
CISA due date
—
Cloudanix analysis
A bug in how the operating system manages graphics memory buffers can cause the computer to crash when performing display updates.
- Exploitation
- Local Privilege
- Attacker needs
- Local User
- Complexity
- Moderate
- Impact
- Full Compromise
- Component
- OS kernel
- Class
- Use After Free
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Use-after-free in Linux kernel DRM/GEM framebuffer reference counting allows a GEM handle to be released while its buffer object remains attached, prematurely freeing the dma-buf backing store and causing invalid memory access during vmap operations in atomic commits and page flips.
Why it matters to the business
Kernel crashes and system instability during graphics mode-setting on affected Linux systems; low immediate risk given absence from KEV, low EPSS, and no ransomware usage, though widespread kernel prevalence increases exposure for graphics workloads.
How an attack unfolds
An attacker with local access performs DRM ioctl sequences that attach GEM objects to framebuffers then release handles, triggering the flaw especially on shadow-plane drivers during page flips; the resulting dma-buf vmap failure produces a segmentation fault, as seen in traces involving drm_gem_shmem_vmap and drm_atomic_helper_commit.
How to fix it
Upgrade the Linux kernel to the fixed commit cb4c956a15f8b7f870649454771fc3761f504b5f or any later stable release containing the patch; rebuild and reboot with the updated kernel.
How to confirm the fix worked
Verify the running kernel contains commit cb4c956a15f8b7f870649454771fc3761f504b5f; reproduce prior test sequences involving drm_mode_atomic_ioctl and confirm absence of the dma_buf_vmap warning and segfault.
Typical attack path
- Obtain local unprivileged access on a Linux system using affected kernel
- Craft DRM framebuffer and atomic commit operations that hold GEM handles only briefly
- Trigger mode-setting or page-flip paths that invoke vmap on the now-freed dma-buf
- Observe or weaponize the resulting kernel warning and crash in dma_buf_vmap
How to detect it
Search kernel logs (dmesg, journalctl) for WARNING entries at drivers/dma-buf/dma-buf.c:1527, RIP addresses in dma_buf_vmap, and call traces containing drm_gem_shmem_vmap, drm_atomic_helper_prepare_planes, and drm_mode_atomic_ioctl.
- dma_buf_vmap+0x224/0x430
- WARNING: CPU:.*at drivers/dma-buf/dma-buf.c:1527
- drm_gem_shmem_vmap+0x74/0x710
- drm_atomic_helper_prepare_planes.part.0+0x487/0xb10
What your security team should do
- Prioritize kernel updates on all systems with graphics workloads
- Monitor kernel logs for dma_buf_vmap and drm_gem_fb_vmap stack traces
- Apply updates before the next scheduled maintenance window given 459 days since publication
The record
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer object, if any. [1] Trying to use the framebuffer in further mode-setting operations leads to a segmentation fault. Most easily happens with driver that use shadow planes for vmap-ing the dma-buf during a page flip. An example is shown below. [ 156.791968] ------------[ cut here ]------------ [ 156.796830] WARNING: CPU: 2 PID: 2255 at drivers/dma-buf/dma-buf.c:1527 dma_buf_vmap+0x224/0x430 [...] [ 156.942028] RIP: 0010:dma_buf_vmap+0x224/0x430 [ 157.043420] Call Trace: [ 157.045898] <TASK> [ 157.048030] ? show_trace_log_lvl+0x1af/0x2c0 [ 157.052436] ? show_trace_log_lvl+0x1af/0x2c0 [ 157.056836] ? show_trace_log_lvl+0x1af/0x2c0 [ 157.061253] ? drm_gem_shmem_vmap+0x74/0x710 [ 157.065567] ? dma_buf_vmap+0x224/0x430 [ 157.069446] ? __warn.cold+0x58/0xe4 [ 157.073061] ? dma_buf_vmap+0x224/0x430 [ 157.077111] ? report_bug+0x1dd/0x390 [ 157.080842] ? handle_bug+0x5e/0xa0 [ 157.084389] ? exc_invalid_op+0x14/0x50 [ 157.088291] ? asm_exc_invalid_op+0x16/0x20 [ 157.092548] ? dma_buf_vmap+0x224/0x430 [ 157.096663] ? dma_resv_get_singleton+0x6d/0x230 [ 157.101341] ? __pfx_dma_buf_vmap+0x10/0x10 [ 157.105588] ? __pfx_dma_resv_get_singleton+0x10/0x10 [ 157.110697] drm_gem_shmem_vmap+0x74/0x710 [ 157.114866] drm_gem_vmap+0xa9/0x1b0 [ 157.118763] drm_gem_vmap_unlocked+0x46/0xa0 [ 157.123086] drm_gem_fb_vmap+0xab/0x300 [ 157.126979] drm_atomic_helper_prepare_planes.part.0+0x487/0xb10 [ 157.133032] ? lockdep_init_map_type+0x19d/0x880 [ 157.137701] drm_atomic_helper_commit+0x13d/0x2e0 [ 157.142671] ? drm_atomic_nonblocking_commit+0xa0/0x180 [ 157.147988] drm_mode_atomic_ioctl+0x766/0xe40 [...] [ 157.346424] ---[ end trace 0000000000000000 ]--- Acquiring GEM handles for the framebuffer's GEM buffer objects prevents this from happening. The framebuffer's cleanup later puts the handle references. Commit 1a148af06000 ("drm/gem-shmem: Use dma_buf from GEM object instance") triggers the segmentation fault easily by using the dma-buf field more widely. The underlying issue with reference counting has been present before. v2: - acquire the handle instead of the BO (Christian) - fix comment style (Christian) - drop the Fixes tag (Christian) - rename err_ gotos - add missing Link tag
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:10 | kernel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-debug | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-debug-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-debug-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-debug-devel-matched | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-debug-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-debug-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-debug-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-devel-matched | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-64k-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-abi-stablelists | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-cross-headers | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-debug | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-debug-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-debug-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-debug-devel-matched | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-debug-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-debug-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-debug-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-debug-uki-virt | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-devel-matched | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-doc | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-headers | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-debug | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-debug-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-debug-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-debug-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-debug-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-debug-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-64k-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-debug | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-debug-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-debug-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-debug-kvm | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-debug-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-debug-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-debug-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-kvm | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-rt-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-tools | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-tools-libs | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-tools-libs-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-uki-virt | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-uki-virt-addons | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-zfcpdump | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-zfcpdump-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-zfcpdump-devel | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-zfcpdump-devel-matched | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-zfcpdump-modules | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-zfcpdump-modules-core | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | kernel-zfcpdump-modules-extra | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | libperf | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | perf | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | python3-perf | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | rtla | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:10 | rv | 0 | 6.12.0-55.31.1.el10_0 |
| AlmaLinux:8 | bpftool | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-abi-stablelists | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-core | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-cross-headers | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-debug | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-debug-core | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-debug-devel | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-debug-modules | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-debug-modules-extra | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-devel | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-doc | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-headers | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-modules | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-modules-extra | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-rt | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-core | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-debug | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-core | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-devel | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-devel | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-modules | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-rt-modules-extra | 0 | 4.18.0-553.75.1.rt7.416.el8_10 |
| AlmaLinux:8 | kernel-tools | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-tools-libs | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-tools-libs-devel | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-core | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | perf | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:8 | python3-perf | 0 | 4.18.0-553.75.1.el8_10 |
| AlmaLinux:9 | kernel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-debug | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-debug-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-debug-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-debug-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-devel-matched | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-64k-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-abi-stablelists | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-cross-headers | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-debug | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-debug-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-debug-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-debug-devel-matched | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-debug-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-debug-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-debug-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-debug-uki-virt | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-devel-matched | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-doc | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-headers | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-debug | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-debug-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-debug-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-64k-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-debug | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-debug-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-debug-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-debug-kvm | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-debug-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-kvm | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-rt-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-tools | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-tools-libs | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-tools-libs-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-uki-virt | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-uki-virt-addons | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-zfcpdump | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-zfcpdump-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | libperf | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | perf | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | python3-perf | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | rtla | 0 | 5.14.0-570.42.2.el9_6 |
| AlmaLinux:9 | rv | 0 | 5.14.0-570.42.2.el9_6 |
| Debian:11 | linux | 0 | No fix |
| Debian:12 | linux | 0 | No fix |
| Debian:13 | linux | 0 | 6.12.41-1 |
| Debian:14 | linux | 0 | No fix |
| Debian:14 | linux | 0 | 6.16.3-1 |
| Linux | Kernel | 0 | 6.6.99 |
| Linux | Kernel | 3.12.0 | 6.6.99 |
| Mageia:9 | kernel | 0 | 6.6.101-1.mga9 |
| Mageia:9 | kernel-linus | 0 | 6.6.101-1.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.1.10-7.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-83.mga9 |
| Mageia:9 | wireless-regdb | 0 | 20250710-1.mga9 |
| SUSE:Linux Enterprise High Availability Extension 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.65.1 |
Related vulnerabilities
- CVE-2025-68285 In the Linux kernel, the following vulnerability has been resolved: libceph: fix… Also affects kernel
- CVE-2025-68287 In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race… Also affects kernel
- CVE-2025-40277 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate… Also affects kernel
- CVE-2025-40240 In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL… Also affects kernel
- CVE-2025-40185 In the Linux kernel, the following vulnerability has been resolved: ice: ice_adapter… Also affects kernel
- CVE-2025-40176 In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending… Also affects kernel
- CVE-2025-40058 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow… Also affects kernel
- CVE-2025-40047 In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid… Also affects kernel