CVE-2025-39679: drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau/nvif: Fix potential memory leak in nvifvmmctor().
When the nvifvmmtype is invalid, we will return error directly without freeing the args in nvifvmmctor(), which leading a memory leak. Fix it by setting the ret -EINVAL and goto done.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39679?
CVE-2025-39679 has a moderate severity due to the potential memory leak it introduces in the Linux kernel.
How do I fix CVE-2025-39679?
To fix CVE-2025-39679, update your Linux kernel to the latest patched version that addresses the memory leak.
Which versions of the Linux kernel are affected by CVE-2025-39679?
CVE-2025-39679 affects multiple versions of the Linux kernel that contain the vulnerable nvif_vmm_ctor() function.
Is CVE-2025-39679 exploitative?
While CVE-2025-39679 does not introduce a direct exploit vector, it can contribute to denial of service due to resource depletion from memory leaks.
What components are primarily affected by CVE-2025-39679?
CVE-2025-39679 specifically impacts the DRM (Direct Rendering Manager) component in the Linux kernel involving the nouveau driver.