CVE-2025-22097 - Vulnerability Details

Vendors	Products
Linux	Linux Kernel

Link	Providers
https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd
https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954
https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936
https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067
https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853
https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5
https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828
https://lore.kernel.org/linux-cve-announce/2025041619-CVE-2025-22097-d4f5@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-22097
https://www.cve.org/CVERecord?id=CVE-2025-22097

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel

Type	Values Removed	Values Added
Weaknesses		CWE-416
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}` cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025041619-CVE-2025-22097-d4f5@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2025-22097 https://www.cve.org/CVERecord?id=CVE-2025-22097
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or freed default_config pointer and it might double free it. Fix both possible errors by initializing default_config only when the driver initialization succeeded.
Title		drm/vkms: Fix use after free and double free on init error
References		https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954 https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936 https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067 https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5 https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-22097", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-12-29T08:45:45.818Z", "datePublished": "2025-04-16T14:12:47.649Z", "dateUpdated": "2025-05-26T05:18:23.981Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-26T05:18:23.981Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vkms: Fix use after free and double free on init error\n\nIf the driver initialization fails, the vkms_exit() function might\naccess an uninitialized or freed default_config pointer and it might\ndouble free it.\n\nFix both possible errors by initializing default_config only when the\ndriver initialization succeeded."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/vkms/vkms_drv.c"], "versions": [{"version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "49a69f67f53518bdd9b7eeebf019a2da6cc0e954", "status": "affected", "versionType": "git"}, {"version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "79d138d137b80eeb0a83244d1cff29e64cf91067", "status": "affected", "versionType": "git"}, {"version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "561fc0c5cf41f646f3e9e61784cbc0fc832fb936", "status": "affected", "versionType": "git"}, {"version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "d5eb8e347905ab17788a7903fa1d3d06747355f5", "status": "affected", "versionType": "git"}, {"version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "b8a18bb53e06d6d3c1fd03d12533d6e333ba8853", "status": "affected", "versionType": "git"}, {"version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "1f68f1cf09d06061eb549726ff8339e064eddebd", "status": "affected", "versionType": "git"}, {"version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "ed15511a773df86205bda66c37193569575ae828", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/vkms/vkms_drv.c"], "versions": [{"version": "5.12", "status": "affected"}, {"version": "0", "lessThan": "5.12", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.180", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.134", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.87", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.23", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.13.11", "lessThanOrEqual": "6.13.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.14.2", "lessThanOrEqual": "6.14.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.15", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "5.15.180"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.1.134"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.6.87"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.12.23"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.13.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.14.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.15"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954"}, {"url": "https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067"}, {"url": "https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936"}, {"url": "https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5"}, {"url": "https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853"}, {"url": "https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd"}, {"url": "https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828"}], "title": "drm/vkms: Fix use after free and double free on init error", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-22097", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-25T14:30:06.841533Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-25T14:36:34.623Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-22097 (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

state : PUBLISHED (string)

assignerShortName : Linux (string)

dateReserved : 2024-12-29T08:45:45.818Z (string)

datePublished : 2025-04-16T14:12:47.649Z (string)

dateUpdated : 2025-05-26T05:18:23.981Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2025-05-26T05:18:23.981Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or freed default_config pointer and it might double free it. Fix both possible errors by initializing default_config only when the driver initialization succeeded. (string)

}

]

affected : [ »

0 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : unaffected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : drivers/gpu/drm/vkms/vkms_drv.c (string)

]

versions : [ »

0 : { »

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : 49a69f67f53518bdd9b7eeebf019a2da6cc0e954 (string)

status : affected (string)

versionType : git (string)

}

1 : { »

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : 79d138d137b80eeb0a83244d1cff29e64cf91067 (string)

status : affected (string)

versionType : git (string)

}

2 : { »

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : 561fc0c5cf41f646f3e9e61784cbc0fc832fb936 (string)

status : affected (string)

versionType : git (string)

}

3 : { »

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : d5eb8e347905ab17788a7903fa1d3d06747355f5 (string)

status : affected (string)

versionType : git (string)

}

4 : { »

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 (string)

status : affected (string)

versionType : git (string)

}

5 : { »

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : 1f68f1cf09d06061eb549726ff8339e064eddebd (string)

status : affected (string)

versionType : git (string)

}

6 : { »

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : ed15511a773df86205bda66c37193569575ae828 (string)

status : affected (string)

versionType : git (string)

}

]

}

1 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : affected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : drivers/gpu/drm/vkms/vkms_drv.c (string)

]

versions : [ »

0 : { »

version : 5.12 (string)

status : affected (string)

}

1 : { »

version : 0 (string)

lessThan : 5.12 (string)

status : unaffected (string)

versionType : semver (string)

}

2 : { »

version : 5.15.180 (string)

lessThanOrEqual : 5.15.* (string)

status : unaffected (string)

versionType : semver (string)

}

3 : { »

version : 6.1.134 (string)

lessThanOrEqual : 6.1.* (string)

status : unaffected (string)

versionType : semver (string)

}

4 : { »

version : 6.6.87 (string)

lessThanOrEqual : 6.6.* (string)

status : unaffected (string)

versionType : semver (string)

}

5 : { »

version : 6.12.23 (string)

lessThanOrEqual : 6.12.* (string)

status : unaffected (string)

versionType : semver (string)

}

6 : { »

version : 6.13.11 (string)

lessThanOrEqual : 6.13.* (string)

status : unaffected (string)

versionType : semver (string)

}

7 : { »

version : 6.14.2 (string)

lessThanOrEqual : 6.14.* (string)

status : unaffected (string)

versionType : semver (string)

}

8 : { »

version : 6.15 (string)

lessThanOrEqual : * (string)

status : unaffected (string)

versionType : original_commit_for_fix (string)

}

]

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

operator : OR (string)

negate : false (boolean)

cpeMatch : [ »

0 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.12 (string)

versionEndExcluding : 5.15.180 (string)

}

1 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.12 (string)

versionEndExcluding : 6.1.134 (string)

}

2 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.12 (string)

versionEndExcluding : 6.6.87 (string)

}

3 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.12 (string)

versionEndExcluding : 6.12.23 (string)

}

4 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.12 (string)

versionEndExcluding : 6.13.11 (string)

}

5 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.12 (string)

versionEndExcluding : 6.14.2 (string)

}

6 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.12 (string)

versionEndExcluding : 6.15 (string)

}

]

}

]

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954 (string)

}

1 : { »

url : https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067 (string)

}

2 : { »

url : https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936 (string)

}

3 : { »

url : https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5 (string)

}

4 : { »

url : https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 (string)

}

5 : { »

url : https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd (string)

}

6 : { »

url : https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828 (string)

}

]

title : drm/vkms: Fix use after free and double free on init error (string)

x_generator : { »

engine : bippy-1.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-22097 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-25T14:30:06.841533Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-416 (string)

description : CWE-416 Use After Free (string)

}

]

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-25T14:36:34.623Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-22097", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-25T14:30:06.841533Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-25T14:30:08.194Z"}}], "cna": {"title": "drm/vkms: Fix use after free and double free on init error", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "49a69f67f53518bdd9b7eeebf019a2da6cc0e954", "versionType": "git"}, {"status": "affected", "version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "79d138d137b80eeb0a83244d1cff29e64cf91067", "versionType": "git"}, {"status": "affected", "version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "561fc0c5cf41f646f3e9e61784cbc0fc832fb936", "versionType": "git"}, {"status": "affected", "version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "d5eb8e347905ab17788a7903fa1d3d06747355f5", "versionType": "git"}, {"status": "affected", "version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "b8a18bb53e06d6d3c1fd03d12533d6e333ba8853", "versionType": "git"}, {"status": "affected", "version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "1f68f1cf09d06061eb549726ff8339e064eddebd", "versionType": "git"}, {"status": "affected", "version": "2df7af93fdadb9ba8226fe443fae15ecdefda2a6", "lessThan": "ed15511a773df86205bda66c37193569575ae828", "versionType": "git"}], "programFiles": ["drivers/gpu/drm/vkms/vkms_drv.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.12"}, {"status": "unaffected", "version": "0", "lessThan": "5.12", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.180", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.134", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.87", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.23", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.13.11", "versionType": "semver", "lessThanOrEqual": "6.13.*"}, {"status": "unaffected", "version": "6.14.2", "versionType": "semver", "lessThanOrEqual": "6.14.*"}, {"status": "unaffected", "version": "6.15-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/gpu/drm/vkms/vkms_drv.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954"}, {"url": "https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067"}, {"url": "https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936"}, {"url": "https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5"}, {"url": "https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853"}, {"url": "https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd"}, {"url": "https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vkms: Fix use after free and double free on init error\n\nIf the driver initialization fails, the vkms_exit() function might\naccess an uninitialized or freed default_config pointer and it might\ndouble free it.\n\nFix both possible errors by initializing default_config only when the\ndriver initialization succeeded."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.180", "versionStartIncluding": "5.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.134", "versionStartIncluding": "5.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.87", "versionStartIncluding": "5.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.23", "versionStartIncluding": "5.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.13.11", "versionStartIncluding": "5.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.14.2", "versionStartIncluding": "5.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.15-rc1", "versionStartIncluding": "5.12"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-04T07:29:39.652Z"}}}, "cveMetadata": {"cveId": "CVE-2025-22097", "state": "PUBLISHED", "dateUpdated": "2025-05-04T07:29:39.652Z", "dateReserved": "2024-12-29T08:45:45.818Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2025-04-16T14:12:47.649Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-22097 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-25T14:30:06.841533Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-416 (string)

description : CWE-416 Use After Free (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-25T14:30:08.194Z (string)

}

]

cna : { »

title : drm/vkms: Fix use after free and double free on init error (string)

affected : [ »

0 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : 49a69f67f53518bdd9b7eeebf019a2da6cc0e954 (string)

versionType : git (string)

}

1 : { »

status : affected (string)

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : 79d138d137b80eeb0a83244d1cff29e64cf91067 (string)

versionType : git (string)

}

2 : { »

status : affected (string)

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : 561fc0c5cf41f646f3e9e61784cbc0fc832fb936 (string)

versionType : git (string)

}

3 : { »

status : affected (string)

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : d5eb8e347905ab17788a7903fa1d3d06747355f5 (string)

versionType : git (string)

}

4 : { »

status : affected (string)

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 (string)

versionType : git (string)

}

5 : { »

status : affected (string)

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : 1f68f1cf09d06061eb549726ff8339e064eddebd (string)

versionType : git (string)

}

6 : { »

status : affected (string)

version : 2df7af93fdadb9ba8226fe443fae15ecdefda2a6 (string)

lessThan : ed15511a773df86205bda66c37193569575ae828 (string)

versionType : git (string)

}

]

programFiles : [ »

0 : drivers/gpu/drm/vkms/vkms_drv.c (string)

]

defaultStatus : unaffected (string)

}

1 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.12 (string)

}

1 : { »

status : unaffected (string)

version : 0 (string)

lessThan : 5.12 (string)

versionType : semver (string)

}

2 : { »

status : unaffected (string)

version : 5.15.180 (string)

versionType : semver (string)

lessThanOrEqual : 5.15.* (string)

}

3 : { »

status : unaffected (string)

version : 6.1.134 (string)

versionType : semver (string)

lessThanOrEqual : 6.1.* (string)

}

4 : { »

status : unaffected (string)

version : 6.6.87 (string)

versionType : semver (string)

lessThanOrEqual : 6.6.* (string)

}

5 : { »

status : unaffected (string)

version : 6.12.23 (string)

versionType : semver (string)

lessThanOrEqual : 6.12.* (string)

}

6 : { »

status : unaffected (string)

version : 6.13.11 (string)

versionType : semver (string)

lessThanOrEqual : 6.13.* (string)

}

7 : { »

status : unaffected (string)

version : 6.14.2 (string)

versionType : semver (string)

lessThanOrEqual : 6.14.* (string)

}

8 : { »

status : unaffected (string)

version : 6.15-rc1 (string)

versionType : original_commit_for_fix (string)

lessThanOrEqual : * (string)

}

]

programFiles : [ »

0 : drivers/gpu/drm/vkms/vkms_drv.c (string)

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954 (string)

}

1 : { »

url : https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067 (string)

}

2 : { »

url : https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936 (string)

}

3 : { »

url : https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5 (string)

}

4 : { »

url : https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 (string)

}

5 : { »

url : https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd (string)

}

6 : { »

url : https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828 (string)

}

]

x_generator : { »

engine : bippy-1.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or freed default_config pointer and it might double free it. Fix both possible errors by initializing default_config only when the driver initialization succeeded. (string)

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

negate : false (boolean)

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 5.15.180 (string)

versionStartIncluding : 5.12 (string)

}

1 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.1.134 (string)

versionStartIncluding : 5.12 (string)

}

2 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.6.87 (string)

versionStartIncluding : 5.12 (string)

}

3 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.12.23 (string)

versionStartIncluding : 5.12 (string)

}

4 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.13.11 (string)

versionStartIncluding : 5.12 (string)

}

5 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.14.2 (string)

versionStartIncluding : 5.12 (string)

}

6 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.15-rc1 (string)

versionStartIncluding : 5.12 (string)

}

]

operator : OR (string)

}

]

}

]

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2025-05-04T07:29:39.652Z (string)

}

cveMetadata : { »

cveId : CVE-2025-22097 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-04T07:29:39.652Z (string)

dateReserved : 2024-12-29T08:45:45.818Z (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

datePublished : 2025-04-16T14:12:47.649Z (string)

assignerShortName : Linux (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B590CF27-0840-4946-B6A5-CBD9BB4796CA", "versionEndExcluding": "5.15.180", "versionStartIncluding": "5.12", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "3985DEC3-0437-4177-BC42-314AB575285A", "versionEndExcluding": "6.1.134", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "EFF24260-49B1-4251-9477-C564CFDAD25B", "versionEndExcluding": "6.6.87", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "26CAB76D-F00F-43CE-BEAD-7097F8FB1D6C", "versionEndExcluding": "6.12.23", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E7E864B0-8C00-4679-BA55-659B4C9C3AD3", "versionEndExcluding": "6.13.11", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0", "versionEndExcluding": "6.14.2", "versionStartIncluding": "6.14", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vkms: Fix use after free and double free on init error\n\nIf the driver initialization fails, the vkms_exit() function might\naccess an uninitialized or freed default_config pointer and it might\ndouble free it.\n\nFix both possible errors by initializing default_config only when the\ndriver initialization succeeded."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/vkms: Se corrige el error \"use after free\" y \"double free on init\". Si falla la inicializaci\u00f3n del controlador, la funci\u00f3n \"vkms_exit()\" podr\u00eda acceder a un puntero \"default_config\" no inicializado o liberado y liberarlo dos veces. Se corrigen ambos posibles errores inicializando \"default_config\" solo cuando la inicializaci\u00f3n del controlador se haya realizado correctamente."}], "id": "CVE-2025-22097", "lastModified": "2025-04-25T18:41:04.243", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2025-04-16T15:16:04.080", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B590CF27-0840-4946-B6A5-CBD9BB4796CA (string)

versionEndExcluding : 5.15.180 (string)

versionStartIncluding : 5.12 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3985DEC3-0437-4177-BC42-314AB575285A (string)

versionEndExcluding : 6.1.134 (string)

versionStartIncluding : 5.16 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : EFF24260-49B1-4251-9477-C564CFDAD25B (string)

versionEndExcluding : 6.6.87 (string)

versionStartIncluding : 6.2 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 26CAB76D-F00F-43CE-BEAD-7097F8FB1D6C (string)

versionEndExcluding : 6.12.23 (string)

versionStartIncluding : 6.7 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E7E864B0-8C00-4679-BA55-659B4C9C3AD3 (string)

versionEndExcluding : 6.13.11 (string)

versionStartIncluding : 6.13 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FADAE5D8-4808-442C-B218-77B2CE8780A0 (string)

versionEndExcluding : 6.14.2 (string)

versionStartIncluding : 6.14 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or freed default_config pointer and it might double free it. Fix both possible errors by initializing default_config only when the driver initialization succeeded. (string)

}

1 : { »

lang : es (string)

value : En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/vkms: Se corrige el error "use after free" y "double free on init". Si falla la inicialización del controlador, la función "vkms_exit()" podría acceder a un puntero "default_config" no inicializado o liberado y liberarlo dos veces. Se corrigen ambos posibles errores inicializando "default_config" solo cuando la inicialización del controlador se haya realizado correctamente. (string)

}

]

id : CVE-2025-22097 (string)

lastModified : 2025-04-25T18:41:04.243 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2025-04-16T15:16:04.080 (string)

references : [ »

0 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/1f68f1cf09d06061eb549726ff8339e064eddebd (string)

}

1 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/49a69f67f53518bdd9b7eeebf019a2da6cc0e954 (string)

}

2 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/561fc0c5cf41f646f3e9e61784cbc0fc832fb936 (string)

}

3 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/79d138d137b80eeb0a83244d1cff29e64cf91067 (string)

}

4 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/b8a18bb53e06d6d3c1fd03d12533d6e333ba8853 (string)

}

5 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/d5eb8e347905ab17788a7903fa1d3d06747355f5 (string)

}

6 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/ed15511a773df86205bda66c37193569575ae828 (string)

}

]

sourceIdentifier : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "kernel: drm/vkms: Fix use after free and double free on init error", "id": "2360223", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2360223"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-416", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/vkms: Fix use after free and double free on init error\nIf the driver initialization fails, the vkms_exit() function might\naccess an uninitialized or freed default_config pointer and it might\ndouble free it.\nFix both possible errors by initializing default_config only when the\ndriver initialization succeeded."], "name": "CVE-2025-22097", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-04-16T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-22097\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-22097\nhttps://lore.kernel.org/linux-cve-announce/2025041619-CVE-2025-22097-d4f5@gregkh/T"], "threat_severity": "Moderate"}

{

bugzilla : { »

description : kernel: drm/vkms: Fix use after free and double free on init error (string)

id : 2360223 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2360223 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 6.7 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

status : draft (string)

}

cwe : CWE-416 (string)

details : [ »

0 : In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or freed default_config pointer and it might double free it. Fix both possible errors by initializing default_config only when the driver initialization succeeded. (string)

]

name : CVE-2025-22097 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:10 (string)

fix_state : Fix deferred (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 10 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

4 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Out of support scope (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

5 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Out of support scope (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

6 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Fix deferred (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

7 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Fix deferred (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2025-04-16T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2025-22097 https://nvd.nist.gov/vuln/detail/CVE-2025-22097 https://lore.kernel.org/linux-cve-announce/2025041619-CVE-2025-22097-d4f5@gregkh/T (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object