CVE-2025-21978

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21978
In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fix address space leak when Hyper-V DRM device is removed When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram, and maps it cacheable. If the device removed, or in the error path for device probing, the MMIO space is released but no unmap is done. Consequently the kernel address space for the mapping is leaked. Fix this by adding iounmap() calls in the device removal path, and in the error path during device probing.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/158242b56bf465a73e1edeac0fe828a8acad4499 Patch
https://git.kernel.org/stable/c/24f1bbfb2be77dad82489c1468bbb14312aab129 Patch
https://git.kernel.org/stable/c/ad27b4a51495490b815580d9b935e8eee14d1a9c Patch
https://git.kernel.org/stable/c/aed709355fd05ef747e1af24a1d5d78cd7feb81e Patch
https://git.kernel.org/stable/c/c40cd24bfb9bfbb315c118ca14ebe6cf52e2dd1e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
History

30 Oct 2025, 21:10

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/hyperv: Se soluciona la fuga de espacio de direcciones al eliminar un dispositivo DRM de Hyper-V. Al sondear un dispositivo DRM de Hyper-V, el controlador asigna espacio MMIO para la VRAM y lo asigna como caché. Si se elimina el dispositivo, o si se encuentra en la ruta de error para el sondeo del dispositivo, se libera el espacio MMIO, pero no se desasigna. En consecuencia, se filtra el espacio de direcciones del kernel para la asignación. Para solucionar esto, agregue llamadas a iounmap() en la ruta de eliminación del dispositivo y en la ruta de error durante el sondeo del dispositivo.
References () https://git.kernel.org/stable/c/158242b56bf465a73e1edeac0fe828a8acad4499 - () https://git.kernel.org/stable/c/158242b56bf465a73e1edeac0fe828a8acad4499 - Patch
References () https://git.kernel.org/stable/c/24f1bbfb2be77dad82489c1468bbb14312aab129 - () https://git.kernel.org/stable/c/24f1bbfb2be77dad82489c1468bbb14312aab129 - Patch
References () https://git.kernel.org/stable/c/ad27b4a51495490b815580d9b935e8eee14d1a9c - () https://git.kernel.org/stable/c/ad27b4a51495490b815580d9b935e8eee14d1a9c - Patch
References () https://git.kernel.org/stable/c/aed709355fd05ef747e1af24a1d5d78cd7feb81e - () https://git.kernel.org/stable/c/aed709355fd05ef747e1af24a1d5d78cd7feb81e - Patch
References () https://git.kernel.org/stable/c/c40cd24bfb9bfbb315c118ca14ebe6cf52e2dd1e - () https://git.kernel.org/stable/c/c40cd24bfb9bfbb315c118ca14ebe6cf52e2dd1e - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

01 Apr 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-01 16:15

Updated : 2025-10-30 21:10

NVD link : CVE-2025-21978

Mitre link : CVE-2025-21978

CVE.ORG link : CVE-2025-21978

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime