CVE-2025-40316 — Linux vulnerability
15 documents6 sources
Severity
—N/A
No vectorEPSS
0.0%
top 90.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 8
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Fix device use-after-free on unbind
A recent change fixed device reference leaks when looking up drm
platform device driver data during bind() but failed to remove a partial
fix which had been added by commit 80805b62ea5b ("drm/mediatek: Fix
kobject put for component sub-drivers").
This results in a reference imbalance on component bind() failures and
on unbind() which could lead to a user-after-free.
Make sure…
Affected Packages5 packages
▶CVEListV5linux/linux7d98166183d627c0b9daca7672b2191fae0f8a03 — a5a896f8315de358a2932e2c23c42d550256046a+5