https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:36:37 +0000 https://vulnerability.circl.lu/vuln/cve-2025-38187 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()</p> <p>The RPC container is released after being passed to r535_gsp_rpc_send().</p> <p>When sending the initial fragment of a large RPC and passing the caller&#39;s RPC container, the container will be freed prematurely. Subsequent attempts to send remaining fragments will therefore result in a use-after-free.</p> <p>Allocate a temporary RPC container for holding the initial fragment of a large RPC when sending. Free the caller&#39;s container when all fragments are successfully sent.</p> <p>[ Rebase onto Blackwell changes. - Danilo ]</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()</p> <p>The RPC container is released after being passed to r535_gsp_rpc_send().</p> <p>When sending the initial fragment of a large RPC and passing the caller&#39;s RPC container, the container will be freed prematurely. Subsequent attempts to send remaining fragments will therefore result in a use-after-free.</p> <p>Allocate a temporary RPC container for holding the initial fragment of a large RPC when sending. Free the caller&#39;s container when all fragments are successfully sent.</p> <p>[ Rebase onto Blackwell changes. - Danilo ]</p> https://vulnerability.circl.lu/vuln/cve-2025-38187