CVE-2025-40069

CVE-2025-40069

High · published October 28, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: Fix obj leak in VM_BIND error path

If we fail a handle-lookup part way thru, we need to drop the already

obtained obj references.

Patchwork: https://patchwork.freedesktop.org/patch/669784/

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00144 · 3.4th percentile
Published
2025-10-28T16:15Z
References (2)
https://git.kernel.org/stable/c/278f8904434aa96055e793936b5977c010549e28 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2b512909a291a964cfcf6b58de13256ab3e848c4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 28 OCT 11:48Z
    drm/msm: Fix obj leak in VM_BIND error path
    cvelistv5