CVE-2025-21978

Katalog CVE

CVSS 5.5 · Medium EPSS 0,19%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fix address space leak when Hyper-V DRM device is removed When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram, and maps it cacheable. If the device removed, or in the error path for device probing, the MMIO space is released but no unmap is done. Consequently the kernel address space for the mapping is leaked. Fix this by adding iounmap() calls in the device removal path, and in the error path during device probing.

Rincian

Terbit di NVD

1 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/158242b56bf465a73e1edeac0fe828a8acad4499 patch
• https://git.kernel.org/stable/c/24f1bbfb2be77dad82489c1468bbb14312aab129 patch
• https://git.kernel.org/stable/c/ad27b4a51495490b815580d9b935e8eee14d1a9c patch
• https://git.kernel.org/stable/c/aed709355fd05ef747e1af24a1d5d78cd7feb81e patch
• https://git.kernel.org/stable/c/c40cd24bfb9bfbb315c118ca14ebe6cf52e2dd1e patch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html