Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2025-68181

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
16/12/2025
Última modificación:
16/12/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/radeon: Remove calls to drm_put_dev()<br /> <br /> Since the allocation of the drivers main structure was changed to<br /> devm_drm_dev_alloc() drm_put_dev()&amp;#39;ing to trigger it to be free&amp;#39;d<br /> should be done by devres.<br /> <br /> However, drm_put_dev() is still in the probe error and device remove<br /> paths. When the driver fails to probe warnings like the following are<br /> shown because devres is trying to drm_put_dev() after the driver<br /> already did it.<br /> <br /> [ 5.642230] radeon 0000:01:05.0: probe with driver radeon failed with error -22<br /> [ 5.649605] ------------[ cut here ]------------<br /> [ 5.649607] refcount_t: underflow; use-after-free.<br /> [ 5.649620] WARNING: CPU: 0 PID: 357 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110<br /> <br /> (cherry picked from commit 3eb8c0b4c091da0a623ade0d3ee7aa4a93df1ea4)

Impacto