CVE-2025-40111

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/11/2025
Last modified:
12/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/vmwgfx: Fix Use-after-free in validation<br /> <br /> Nodes stored in the validation duplicates hashtable come from an arena<br /> allocator that is cleared at the end of vmw_execbuf_process. All nodes<br /> are expected to be cleared in vmw_validation_drop_ht but this node escaped<br /> because its resource was destroyed prematurely.

Impact