Vulnerability details
CVE-2025-68170
Linux Linux
drm/radeon: Do not kfree() devres managed rdev
CVSS 3.1
7.8High
Official description
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree() devres managed rdev Since the allocation of the drivers main structure was changed to devm_drm_dev_alloc() rdev is managed by devres and we shouldn't be calling kfree() on it. This fixes things exploding if the driver probe fails and devres cleans up the rdev after we already free'd it. (cherry picked from commit 16c0681617b8a045773d4d87b6140002fa75b03b)
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.8High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 6.12 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | a9ed2f052c5c14e4be58c5ec8794dffc87588123 ≤ v < f7482516002a11317912e29577bbf33cf59a0fb1 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | a9ed2f052c5c14e4be58c5ec8794dffc87588123 ≤ v < 2413bbd1d692aed245c2aa38a369a1fa7590db84 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | a9ed2f052c5c14e4be58c5ec8794dffc87588123 ≤ v < 3328443363a0895fd9c096edfe8ecd372ca9145e | CVEProject cvelistV5 (CNA) |
References and advisories
3
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-12-16
- Last updated
- 2026-10-16
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.15%
Probability of exploitation in 30 days
4.4%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- —