In the Linux kernel, the following vulnerability has been resolved:
drm/msm: Fix another leak in the submit error path
putunusedfd() doesn't free the installed file, if we've already done fdinstall(). So we need to also free the syncfile.
Patchwork: https://patchwork.freedesktop.org/patch/653583/
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c40ad1c04d306f7fde26337fdcf8a5979657d93f",
"target": {
"function": "msm_ioctl_gem_submit",
"file": "drivers/gpu/drm/msm/msm_gem_submit.c"
},
"id": "CVE-2025-38409-07d94fa4",
"deprecated": false,
"digest": {
"function_hash": "255039922247506517995345437360273724486",
"length": 5275.0
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00b3401f692082ddf6342500d1be25560bba46d4",
"target": {
"file": "drivers/gpu/drm/msm/msm_gem_submit.c"
},
"id": "CVE-2025-38409-1c4dbfc2",
"deprecated": false,
"digest": {
"line_hashes": [
"7042025334628773484673754981692092535",
"83770133182913039471967924442352013353",
"230792018946345798052359314743007785193",
"68181734528713998761719237416966979452",
"223810077375735210081296360245134555892",
"103865213432322412603720365104370145409",
"95773203032245756802897789814903400317",
"71519388414369090822689069345396753489",
"276335640026226654545836812980677445710",
"144354687361326440234700322139698414606",
"59212043549203206608783071437617350119",
"306062804510428821245468463486448997234",
"217306496318436070409992429380999832253"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f6ce8433a9035b0aa810e1f5b708e9dc1c367b0",
"target": {
"file": "drivers/gpu/drm/msm/msm_gem_submit.c"
},
"id": "CVE-2025-38409-47b4ff5c",
"deprecated": false,
"digest": {
"line_hashes": [
"7042025334628773484673754981692092535",
"83770133182913039471967924442352013353",
"288482672517971733251232499211426787865",
"145696724439337259570826328384813276282",
"223810077375735210081296360245134555892",
"103865213432322412603720365104370145409",
"95773203032245756802897789814903400317",
"71519388414369090822689069345396753489",
"276335640026226654545836812980677445710",
"144354687361326440234700322139698414606",
"59212043549203206608783071437617350119",
"306062804510428821245468463486448997234",
"217306496318436070409992429380999832253"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00b3401f692082ddf6342500d1be25560bba46d4",
"target": {
"function": "msm_ioctl_gem_submit",
"file": "drivers/gpu/drm/msm/msm_gem_submit.c"
},
"id": "CVE-2025-38409-711381ef",
"deprecated": false,
"digest": {
"function_hash": "138030742881215904147186127965868392245",
"length": 5021.0
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f681c2aa8676a890eacc84044717ab0fd26e058f",
"target": {
"file": "drivers/gpu/drm/msm/msm_gem_submit.c"
},
"id": "CVE-2025-38409-aa24811d",
"deprecated": false,
"digest": {
"line_hashes": [
"7042025334628773484673754981692092535",
"83770133182913039471967924442352013353",
"288482672517971733251232499211426787865",
"145696724439337259570826328384813276282",
"223810077375735210081296360245134555892",
"103865213432322412603720365104370145409",
"95773203032245756802897789814903400317",
"71519388414369090822689069345396753489",
"276335640026226654545836812980677445710",
"144354687361326440234700322139698414606",
"59212043549203206608783071437617350119",
"306062804510428821245468463486448997234",
"217306496318436070409992429380999832253"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f6ce8433a9035b0aa810e1f5b708e9dc1c367b0",
"target": {
"function": "msm_ioctl_gem_submit",
"file": "drivers/gpu/drm/msm/msm_gem_submit.c"
},
"id": "CVE-2025-38409-d09fee62",
"deprecated": false,
"digest": {
"function_hash": "336963845134874448257149702044846140523",
"length": 5146.0
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f681c2aa8676a890eacc84044717ab0fd26e058f",
"target": {
"function": "msm_ioctl_gem_submit",
"file": "drivers/gpu/drm/msm/msm_gem_submit.c"
},
"id": "CVE-2025-38409-d32dda39",
"deprecated": false,
"digest": {
"function_hash": "220703910034106268190103963212287807333",
"length": 5302.0
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c40ad1c04d306f7fde26337fdcf8a5979657d93f",
"target": {
"file": "drivers/gpu/drm/msm/msm_gem_submit.c"
},
"id": "CVE-2025-38409-ff21c825",
"deprecated": false,
"digest": {
"line_hashes": [
"7042025334628773484673754981692092535",
"83770133182913039471967924442352013353",
"230792018946345798052359314743007785193",
"68181734528713998761719237416966979452",
"223810077375735210081296360245134555892",
"103865213432322412603720365104370145409",
"95773203032245756802897789814903400317",
"71519388414369090822689069345396753489",
"276335640026226654545836812980677445710",
"144354687361326440234700322139698414606",
"59212043549203206608783071437617350119",
"306062804510428821245468463486448997234",
"217306496318436070409992429380999832253"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
}
]