CVE-2025-40069
kernel: drm/msm: Fix obj leak in VM_BIND error path
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · October 28, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/msm: Fix obj leak in VM_BIND error path
If we fail a handle-lookup part way thru, we need to drop the already obtained obj references.
Patchwork: https://patchwork.freedesktop.org/patch/669784/
Statement
This vulnerability does not pose an operational security risk to Red Hat Enterprise Linux environments because the affected subsystem changes are not present in supported enterprise kernels. The issue involves an object reference leak during memory binding error handling in the Qualcomm MSM display and graphics driver. Because this driver code was introduced in newer upstream development branches not included in enterprise distributions, Red Hat products remain unaffected.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified