In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fix address space leak when Hyper-V DRM device is removed When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram, and maps it cacheable. If the device removed, or in the error path for device probing, the MMIO space is released but no unmap is done. Consequently the kernel address space for the mapping is leaked. Fix this by adding iounmap() calls in the device removal path, and in the error path during device probing.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/158242b56bf465a73e1edeac0fe828a8acad4499 cve-icon cve-icon
https://git.kernel.org/stable/c/24f1bbfb2be77dad82489c1468bbb14312aab129 cve-icon cve-icon
https://git.kernel.org/stable/c/ad27b4a51495490b815580d9b935e8eee14d1a9c cve-icon cve-icon
https://git.kernel.org/stable/c/aed709355fd05ef747e1af24a1d5d78cd7feb81e cve-icon cve-icon
https://git.kernel.org/stable/c/c40cd24bfb9bfbb315c118ca14ebe6cf52e2dd1e cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025040148-CVE-2025-21978-8f3e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21978 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21978 cve-icon
History

Fri, 23 May 2025 02:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

Wed, 02 Apr 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 01 Apr 2025 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fix address space leak when Hyper-V DRM device is removed When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram, and maps it cacheable. If the device removed, or in the error path for device probing, the MMIO space is released but no unmap is done. Consequently the kernel address space for the mapping is leaked. Fix this by adding iounmap() calls in the device removal path, and in the error path during device probing.
Title drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-04-01T15:47:08.168Z

Updated: 2025-05-04T07:26:27.998Z

Reserved: 2024-12-29T08:45:45.798Z

Link: CVE-2025-21978

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-04-01T16:15:29.183

Modified: 2025-04-01T20:26:01.990

Link: CVE-2025-21978

cve-icon Redhat

Severity : Low

Publid Date: 2025-04-01T00:00:00Z

Links: CVE-2025-21978 - Bugzilla