CVE-2025-21978

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/hyperv: Fix address space leak when Hyper-V DRM device is removed

When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram, and maps it cacheable. If the device removed, or in the error path for device probing, the MMIO space is released but no unmap is done. Consequently the kernel address space for the mapping is leaked.

Fix this by adding iounmap() calls in the device removal path, and in the error path during device probing.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= a0ab5abced550ddeefddb06055ed60779a54eb79, < c40cd24bfb9bfbb315c118ca14ebe6cf52e2dd1e; >= a0ab5abced550ddeefddb06055ed60779a54eb79, < ad27b4a51495490b815580d9b935e8eee14d1a9c; >= a0ab5abced550ddeefddb06055ed60779a54eb79, < 24f1bbfb2be77dad82489c1468bbb14312aab129; >= a0ab5abced550ddeefddb06055ed60779a54eb79, < 158242b56bf465a73e1edeac0fe828a8acad4499; >= a0ab5abced550ddeefddb06055ed60779a54eb79, < aed709355fd05ef747e1af24a1d5d78cd7feb81e
LinuxLinux6.0

References

Timeline

Published
Apr 1, 2025
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-219797.8In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work caCVE-2025-219805.5In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED schedulCVE-2025-219815.5In the Linux kernel, the following vulnerability has been resolved: ice: fix memory leak in aRFS after reset Fix aRFS (accelerated ReceiveCVE-2025-219825.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw devm_kaspCVE-2025-219837.8In the Linux kernel, the following vulnerability has been resolved: mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq Currently kvfree_rcu()CVE-2025-219844.7In the Linux kernel, the following vulnerability has been resolved: mm: fix kernel BUG when userfaultfd_move encounters swapcache userfaulCVE-2025-219857.1In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses [WHAT & HOW] hpo_stream_to_CVE-2025-219865.5In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one A bloCVE-2025-219875.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: init return value in amdgpu_ttm_clear_buffer Otherwise an CVE-2025-219885.5In the Linux kernel, the following vulnerability has been resolved: fs/netfs/read_collect: add to next->prev_donated If multiple subrequesCVE-2025-219895.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix missing .is_two_pixels_per_container Starting froCVE-2025-21999.3SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to