In the Linux kernel, the following vulnerability has been resolved:
drm/drmvmamanager: Add drmvmanodeallowonce()
Currently there is no easy way for a drm driver to safely check and allow drmvmaoffsetnode for a drm file just once. Allow drm drivers to call non-refcounted version of drmvmanodeallow() so that a driver doesn't need to keep track of each drmvmanodeallow() to call subsequent drmvmanoderevoke() to prevent memory leak.