drm/sched: Fix fence reference count leak
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix fence reference count leak The last_scheduled fence leaks when an entity is being killed and adding the cleanup callback fails. Decrement the reference count of prev when dma_fence_add_callback() fails, ensuring proper balance. [phasta: add git tag info for stable kernel]
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix fence reference count leak The last_scheduled fence leaks when an entity is being killed and adding the cleanup callback fails. Decrement the reference count of prev when dma_fence_add_callback() fails, ensuring proper balance. [phasta: add git tag info for stable kernel]
05 / REFERENCES
Further evidence
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/1135a9431160575466ea9ac37ebd756ecbe35fff
- https://git.kernel.org/stable/c/35399c84dcedd6d31448fb9e1336ef52673f2882
- https://git.kernel.org/stable/c/a952f1ab696873be124e31ce5ef964d36bce817f
- https://git.kernel.org/stable/c/c76bd3c99293834de7d1dca5de536616d5655e38
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21995.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-21995