BaseFortify

Publication date: 2025-10-28

Last updated on: 2025-10-30

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VM_BIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-28

Last Modified

2025-10-30

Generated

2026-07-07

AI Q&A

2025-10-28

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40069

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a flaw in the Linux kernel's drm/msm component where an object reference leak occurs in the VM_BIND error path. Specifically, if a handle lookup fails partway through the process, the system does not properly release the already obtained object references, leading to a resource leak.

Impact Analysis

The impact of this vulnerability is that it can cause resource leaks in the Linux kernel, potentially leading to increased memory usage or system instability due to unreleased object references when errors occur during handle lookups.

Hi! I’m here to help you understand CVE-2025-40069. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70