CVE-2025-68170: drm/radeon: Do not kfree() devres managed rdev
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Do not kfree() devres managed rdev
Since the allocation of the drivers main structure was changed to devmdrmdevalloc() rdev is managed by devres and we shouldn't be calling kfree() on it.
This fixes things exploding if the driver probe fails and devres cleans up the rdev after we already free'd it.
(cherry picked from commit 16c0681617b8a045773d4d87b6140002fa75b03b)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68170?
CVE-2025-68170 has been rated as moderate in severity due to its potential impact on system stability.
How do I fix CVE-2025-68170?
To fix CVE-2025-68170, you should update to the latest version of the Linux kernel where this vulnerability has been resolved.
What systems are affected by CVE-2025-68170?
CVE-2025-68170 affects the Linux kernel, particularly versions that utilize drm/radeon for Radeon graphics management.
What type of vulnerability is CVE-2025-68170?
CVE-2025-68170 is a memory management vulnerability that involves improper handling of device resources.
Is there a patch available for CVE-2025-68170?
Yes, a patch for CVE-2025-68170 is included in the latest updates for the affected Linux kernel versions.