CVE-2025-22097

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22097
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or freed default_config pointer and it might double free it. Fix both possible errors by initializing default_config only when the driver initialization succeeded.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd Patch
https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954 Patch
https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936 Patch
https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067 Patch
https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 Patch
https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5 Patch
https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 Apr 2025, 18:41

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd - () https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd - Patch
References () https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954 - () https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954 - Patch
References () https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936 - () https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936 - Patch
References () https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067 - () https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067 - Patch
References () https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 - () https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 - Patch
References () https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5 - () https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5 - Patch
References () https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828 - () https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828 - Patch
First Time Linux linux Kernel
Linux

25 Apr 2025, 15:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/vkms: Se corrige el error "use after free" y "double free on init". Si falla la inicialización del controlador, la función "vkms_exit()" podría acceder a un puntero "default_config" no inicializado o liberado y liberarlo dos veces. Se corrigen ambos posibles errores inicializando "default_config" solo cuando la inicialización del controlador se haya realizado correctamente.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-416

16 Apr 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-16 15:16

Updated : 2025-04-25 18:41

NVD link : CVE-2025-22097

Mitre link : CVE-2025-22097

CVE.ORG link : CVE-2025-22097

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free