CVE-2025-40069

Source
https://cve.org/CVERecord?id=CVE-2025-40069
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40069.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-40069
Downstream
Published
2025-10-28T11:48:38.232Z
Modified
2025-12-05T10:15:36.197945Z
Summary
drm/msm: Fix obj leak in VM_BIND error path
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: Fix obj leak in VM_BIND error path

If we fail a handle-lookup part way thru, we need to drop the already obtained obj references.

Patchwork: https://patchwork.freedesktop.org/patch/669784/

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40069.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2e6a8a1fe2b262a6dfd0a65041fcd830ee1e7143
Fixed
2b512909a291a964cfcf6b58de13256ab3e848c4
Fixed
278f8904434aa96055e793936b5977c010549e28

Affected versions

v6.*
v6.16
v6.16-rc3
v6.16-rc4
v6.16-rc5
v6.16-rc6
v6.16-rc7
v6.17
v6.17-rc1
v6.17-rc2
v6.17-rc3
v6.17-rc4
v6.17-rc5
v6.17-rc6
v6.17-rc7
v6.17.1
v6.17.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40069.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.0
Fixed
6.17.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40069.json"