CVE-2025-68181
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
16/12/2025
Última modificación:
16/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/radeon: Remove calls to drm_put_dev()<br />
<br />
Since the allocation of the drivers main structure was changed to<br />
devm_drm_dev_alloc() drm_put_dev()&#39;ing to trigger it to be free&#39;d<br />
should be done by devres.<br />
<br />
However, drm_put_dev() is still in the probe error and device remove<br />
paths. When the driver fails to probe warnings like the following are<br />
shown because devres is trying to drm_put_dev() after the driver<br />
already did it.<br />
<br />
[ 5.642230] radeon 0000:01:05.0: probe with driver radeon failed with error -22<br />
[ 5.649605] ------------[ cut here ]------------<br />
[ 5.649607] refcount_t: underflow; use-after-free.<br />
[ 5.649620] WARNING: CPU: 0 PID: 357 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110<br />
<br />
(cherry picked from commit 3eb8c0b4c091da0a623ade0d3ee7aa4a93df1ea4)



