In the Linux kernel, the following vulnerability has been resolved:
drm/vkms: Fix use after free and double free on init error
If the driver initialization fails, the vkmsexit() function might access an uninitialized or freed defaultconfig pointer and it might double free it.
Fix both possible errors by initializing default_config only when the driver initialization succeeded.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f68f1cf09d06061eb549726ff8339e064eddebd",
"id": "CVE-2025-22097-0b9a7103",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_init",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 338.0,
"function_hash": "264074434348580976483694688504021045722"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5eb8e347905ab17788a7903fa1d3d06747355f5",
"id": "CVE-2025-22097-1044a36b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_init",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 338.0,
"function_hash": "264074434348580976483694688504021045722"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8a18bb53e06d6d3c1fd03d12533d6e333ba8853",
"id": "CVE-2025-22097-158a1287",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"43205916177089581203475954798955099399",
"268016039550609604113234963715432811115",
"69681016292070748817434387649161767905",
"42929766581451418652625651288556688538",
"25587287243913250865846365538600820986",
"202481295231200109010340413869534235281",
"17664320577903437971863090595333924345",
"225273425296248610387204896423633206648",
"262109787054618423238887693412272624346",
"50157703025083685278632843399572642643",
"241568241472231349677961457633027828364",
"103429173148457867446876492085612393196",
"183613476091443469381634083156239373312",
"115987092186866540425657642135219885213",
"7695585831299256246198436316876131081",
"238936367012419662273583488858741164708"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5eb8e347905ab17788a7903fa1d3d06747355f5",
"id": "CVE-2025-22097-1851fd12",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_exit",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 124.0,
"function_hash": "129028287717611154497610080512875295594"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@561fc0c5cf41f646f3e9e61784cbc0fc832fb936",
"id": "CVE-2025-22097-1f355514",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_exit",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 124.0,
"function_hash": "129028287717611154497610080512875295594"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49a69f67f53518bdd9b7eeebf019a2da6cc0e954",
"id": "CVE-2025-22097-280ea913",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"43205916177089581203475954798955099399",
"268016039550609604113234963715432811115",
"69681016292070748817434387649161767905",
"42929766581451418652625651288556688538",
"25587287243913250865846365538600820986",
"202481295231200109010340413869534235281",
"17664320577903437971863090595333924345",
"225273425296248610387204896423633206648",
"262109787054618423238887693412272624346",
"50157703025083685278632843399572642643",
"241568241472231349677961457633027828364",
"103429173148457867446876492085612393196",
"183613476091443469381634083156239373312",
"115987092186866540425657642135219885213",
"7695585831299256246198436316876131081",
"238936367012419662273583488858741164708"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8a18bb53e06d6d3c1fd03d12533d6e333ba8853",
"id": "CVE-2025-22097-28135f14",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_init",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 338.0,
"function_hash": "264074434348580976483694688504021045722"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed15511a773df86205bda66c37193569575ae828",
"id": "CVE-2025-22097-2d3ade45",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_init",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 338.0,
"function_hash": "264074434348580976483694688504021045722"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f68f1cf09d06061eb549726ff8339e064eddebd",
"id": "CVE-2025-22097-3ec11dc8",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"43205916177089581203475954798955099399",
"268016039550609604113234963715432811115",
"69681016292070748817434387649161767905",
"42929766581451418652625651288556688538",
"25587287243913250865846365538600820986",
"202481295231200109010340413869534235281",
"17664320577903437971863090595333924345",
"225273425296248610387204896423633206648",
"262109787054618423238887693412272624346",
"50157703025083685278632843399572642643",
"241568241472231349677961457633027828364",
"103429173148457867446876492085612393196",
"183613476091443469381634083156239373312",
"115987092186866540425657642135219885213",
"7695585831299256246198436316876131081",
"238936367012419662273583488858741164708"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed15511a773df86205bda66c37193569575ae828",
"id": "CVE-2025-22097-50dbf9d9",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_exit",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 124.0,
"function_hash": "129028287717611154497610080512875295594"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8a18bb53e06d6d3c1fd03d12533d6e333ba8853",
"id": "CVE-2025-22097-52ce3315",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_exit",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 124.0,
"function_hash": "129028287717611154497610080512875295594"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79d138d137b80eeb0a83244d1cff29e64cf91067",
"id": "CVE-2025-22097-5d4637b2",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_init",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 338.0,
"function_hash": "264074434348580976483694688504021045722"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79d138d137b80eeb0a83244d1cff29e64cf91067",
"id": "CVE-2025-22097-5e0d2ce6",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"43205916177089581203475954798955099399",
"268016039550609604113234963715432811115",
"69681016292070748817434387649161767905",
"42929766581451418652625651288556688538",
"25587287243913250865846365538600820986",
"202481295231200109010340413869534235281",
"17664320577903437971863090595333924345",
"225273425296248610387204896423633206648",
"262109787054618423238887693412272624346",
"50157703025083685278632843399572642643",
"241568241472231349677961457633027828364",
"103429173148457867446876492085612393196",
"183613476091443469381634083156239373312",
"115987092186866540425657642135219885213",
"7695585831299256246198436316876131081",
"238936367012419662273583488858741164708"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@561fc0c5cf41f646f3e9e61784cbc0fc832fb936",
"id": "CVE-2025-22097-b5d12476",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_init",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 338.0,
"function_hash": "264074434348580976483694688504021045722"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49a69f67f53518bdd9b7eeebf019a2da6cc0e954",
"id": "CVE-2025-22097-bdbd997a",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_exit",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 124.0,
"function_hash": "129028287717611154497610080512875295594"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed15511a773df86205bda66c37193569575ae828",
"id": "CVE-2025-22097-c9d987a9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"43205916177089581203475954798955099399",
"268016039550609604113234963715432811115",
"69681016292070748817434387649161767905",
"42929766581451418652625651288556688538",
"25587287243913250865846365538600820986",
"202481295231200109010340413869534235281",
"17664320577903437971863090595333924345",
"225273425296248610387204896423633206648",
"262109787054618423238887693412272624346",
"50157703025083685278632843399572642643",
"241568241472231349677961457633027828364",
"103429173148457867446876492085612393196",
"183613476091443469381634083156239373312",
"115987092186866540425657642135219885213",
"7695585831299256246198436316876131081",
"238936367012419662273583488858741164708"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79d138d137b80eeb0a83244d1cff29e64cf91067",
"id": "CVE-2025-22097-cd701f84",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_exit",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 124.0,
"function_hash": "129028287717611154497610080512875295594"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5eb8e347905ab17788a7903fa1d3d06747355f5",
"id": "CVE-2025-22097-dbb4ecd2",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"43205916177089581203475954798955099399",
"268016039550609604113234963715432811115",
"69681016292070748817434387649161767905",
"42929766581451418652625651288556688538",
"25587287243913250865846365538600820986",
"202481295231200109010340413869534235281",
"17664320577903437971863090595333924345",
"225273425296248610387204896423633206648",
"262109787054618423238887693412272624346",
"50157703025083685278632843399572642643",
"241568241472231349677961457633027828364",
"103429173148457867446876492085612393196",
"183613476091443469381634083156239373312",
"115987092186866540425657642135219885213",
"7695585831299256246198436316876131081",
"238936367012419662273583488858741164708"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f68f1cf09d06061eb549726ff8339e064eddebd",
"id": "CVE-2025-22097-edbb84bc",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_exit",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 124.0,
"function_hash": "129028287717611154497610080512875295594"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@561fc0c5cf41f646f3e9e61784cbc0fc832fb936",
"id": "CVE-2025-22097-f42d7fd7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"43205916177089581203475954798955099399",
"268016039550609604113234963715432811115",
"69681016292070748817434387649161767905",
"42929766581451418652625651288556688538",
"25587287243913250865846365538600820986",
"202481295231200109010340413869534235281",
"17664320577903437971863090595333924345",
"225273425296248610387204896423633206648",
"262109787054618423238887693412272624346",
"50157703025083685278632843399572642643",
"241568241472231349677961457633027828364",
"103429173148457867446876492085612393196",
"183613476091443469381634083156239373312",
"115987092186866540425657642135219885213",
"7695585831299256246198436316876131081",
"238936367012419662273583488858741164708"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49a69f67f53518bdd9b7eeebf019a2da6cc0e954",
"id": "CVE-2025-22097-fbb9e417",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "vkms_init",
"file": "drivers/gpu/drm/vkms/vkms_drv.c"
},
"digest": {
"length": 338.0,
"function_hash": "264074434348580976483694688504021045722"
},
"signature_type": "Function"
}
]