cbcvebase.
CVE-2025-40111
published 2025-11-12

CVE-2025-40111: In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates…

PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.14%
3.6th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmw_execbuf_process. All nodes are expected to be cleared in vmw_validation_drop_ht but this node escaped because its resource was destroyed prematurely.

Affected

32 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
debianlinux-6.1< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
linuxlinux
linuxlinux>= 64ad2abfe9a628ce79859d072704bd1ef7682044 < 1822e5287b7dfa59d0af966756ebf1dc652b60ee1822e5287b7dfa59d0af966756ebf1dc652b60ee
linuxlinux>= 64ad2abfe9a628ce79859d072704bd1ef7682044 < fb7165e5f3b3b10721ff70553583ad12e90e447afb7165e5f3b3b10721ff70553583ad12e90e447a
linuxlinux>= 64ad2abfe9a628ce79859d072704bd1ef7682044 < 4c918f9d1ccccc0e092f43dcb2d8266f54d7340b4c918f9d1ccccc0e092f43dcb2d8266f54d7340b
linuxlinux>= 64ad2abfe9a628ce79859d072704bd1ef7682044 < 9a8eaca539708ca532747f606d231f70e684e8ca9a8eaca539708ca532747f606d231f70e684e8ca
linuxlinux>= 64ad2abfe9a628ce79859d072704bd1ef7682044 < 867bda5d95d36f10da398fd4409e21c7002b2332867bda5d95d36f10da398fd4409e21c7002b2332
linuxlinux>= 64ad2abfe9a628ce79859d072704bd1ef7682044 < 655a2f29bfc21105c80bf8a7d7aafa6eca8b4496655a2f29bfc21105c80bf8a7d7aafa6eca8b4496
linuxlinux>= 64ad2abfe9a628ce79859d072704bd1ef7682044 < 65608e991c2d771c13404e5c7ae122ac3c3357a465608e991c2d771c13404e5c7ae122ac3c3357a4
linuxlinux>= 64ad2abfe9a628ce79859d072704bd1ef7682044 < dfe1323ab3c8a4dd5625ebfdba44dc47df84512adfe1323ab3c8a4dd5625ebfdba44dc47df84512a
linuxlinux_kernel>= 0 < 5.10.247-15.10.247-1
linuxlinux_kernel>= 0 < 6.1.158-16.1.158-1
linuxlinux_kernel>= 0 < 6.12.57-16.12.57-1
linuxlinux_kernel>= 0 < 6.17.6-16.17.6-1
linuxlinux_kernel>= 0 < 5.15.0-170.1805.15.0-170.180
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 0 < 6.17.0-14.146.17.0-14.14
linuxlinux_kernel>= 4.20.0 < 5.4.3015.4.301
linuxlinux_kernel>= 5.11.0 < 5.15.1955.15.195
linuxlinux_kernel>= 5.16.0 < 6.1.1576.1.157
linuxlinux_kernel>= 5.5.0 < 5.10.2465.10.246
linuxlinux_kernel>= 6.13.0 < 6.17.46.17.4
linuxlinux_kernel>= 6.2.0 < 6.6.1136.6.113
linuxlinux_kernel>= 6.7.0 < 6.12.546.12.54

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_redhat5.8MEDIUM
vendor_msrc4.7MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.