Description
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or freed default_config pointer and it might double free it. Fix both possible errors by initializing default_config only when the driver initialization succeeded.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2df7af93fdadb9ba8226fe443fae15ecdefda2a6 to < 49a69f67f53518bdd9b7eeebf019a2da6cc0e954affected2df7af93fdadb9ba8226fe443fae15ecdefda2a6 to < 79d138d137b80eeb0a83244d1cff29e64cf91067affected2df7af93fdadb9ba8226fe443fae15ecdefda2a6 to < 561fc0c5cf41f646f3e9e61784cbc0fc832fb936affected2df7af93fdadb9ba8226fe443fae15ecdefda2a6 to < d5eb8e347905ab17788a7903fa1d3d06747355f5affected2df7af93fdadb9ba8226fe443fae15ecdefda2a6 to < b8a18bb53e06d6d3c1fd03d12533d6e333ba8853affected2df7af93fdadb9ba8226fe443fae15ecdefda2a6 to < 1f68f1cf09d06061eb549726ff8339e064eddebdaffected2df7af93fdadb9ba8226fe443fae15ecdefda2a6 to < ed15511a773df86205bda66c37193569575ae828affected
Linux Linux
Default version status: affected
5.12affected0 to < 5.12unaffected5.15.180 to ≤ 5.15.*unaffected6.1.134 to ≤ 6.1.*unaffected6.6.87 to ≤ 6.6.*unaffected6.12.23 to ≤ 6.12.*unaffected6.13.11 to ≤ 6.13.*unaffected6.14.2 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954 ↗
- https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067 ↗
- https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936 ↗
- https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5 ↗
- https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 ↗
- https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd ↗
- https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828 ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗