github - ghsa-ffcr-3gvq-xq62

GHSA-FFCR-3GVQ-XQ62

Vulnerability from github – Published: 2025-05-01 15:31 – Updated: 2025-11-07 00:30

Details

In the Linux kernel, the following vulnerability has been resolved:

drm/imagination: fix firmware memory leaks

Free the memory used to hold the results of firmware image processing when the module is unloaded.

Fix the related issue of the same memory being leaked if processing of the firmware image fails during module load.

Ensure all firmware GEM objects are destroyed if firmware image processing fails.

Fixes memory leaks on powervr module unload detected by Kmemleak:

unreferenced object 0xffff000042e20000 (size 94208): comm "modprobe", pid 470, jiffies 4295277154 hex dump (first 32 bytes): 02 ae 7f ed bf 45 84 00 3c 5b 1f ed 9f 45 45 05 .....E..<[...EE. d5 4f 5d 14 6c 00 3d 23 30 d0 3a 4a 66 0e 48 c8 .O].l.=#0.:Jf.H. backtrace (crc dd329dec): kmemleak_alloc+0x30/0x40 kmalloclarge_node+0x140/0x188 kmalloc_large_node_noprof+0x2c/0x13c __kmalloc_noprof+0x48/0x4c0 pvr_fw_init+0xaa4/0x1f50 [powervr]

unreferenced object 0xffff000042d20000 (size 20480): comm "modprobe", pid 470, jiffies 4295277154 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 09 00 00 00 0b 00 00 00 ................ 00 00 00 00 00 00 00 00 07 00 00 00 08 00 00 00 ................ backtrace (crc 395b02e3): kmemleak_alloc+0x30/0x40 kmalloclarge_node+0x140/0x188 kmalloc_large_node_noprof+0x2c/0x13c __kmalloc_noprof+0x48/0x4c0 pvr_fw_init+0xb0c/0x1f50 [powervr]

Severity ?

5.5 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-37764"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-401"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-01T14:15:39Z",
    "severity": "MODERATE"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: fix firmware memory leaks\n\nFree the memory used to hold the results of firmware image processing\nwhen the module is unloaded.\n\nFix the related issue of the same memory being leaked if processing\nof the firmware image fails during module load.\n\nEnsure all firmware GEM objects are destroyed if firmware image\nprocessing fails.\n\nFixes memory leaks on powervr module unload detected by Kmemleak:\n\nunreferenced object 0xffff000042e20000 (size 94208):\n  comm \"modprobe\", pid 470, jiffies 4295277154\n  hex dump (first 32 bytes):\n    02 ae 7f ed bf 45 84 00 3c 5b 1f ed 9f 45 45 05  .....E..\u003c[...EE.\n    d5 4f 5d 14 6c 00 3d 23 30 d0 3a 4a 66 0e 48 c8  .O].l.=#0.:Jf.H.\n  backtrace (crc dd329dec):\n    kmemleak_alloc+0x30/0x40\n    ___kmalloc_large_node+0x140/0x188\n    __kmalloc_large_node_noprof+0x2c/0x13c\n    __kmalloc_noprof+0x48/0x4c0\n    pvr_fw_init+0xaa4/0x1f50 [powervr]\n\nunreferenced object 0xffff000042d20000 (size 20480):\n  comm \"modprobe\", pid 470, jiffies 4295277154\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 09 00 00 00 0b 00 00 00  ................\n    00 00 00 00 00 00 00 00 07 00 00 00 08 00 00 00  ................\n  backtrace (crc 395b02e3):\n    kmemleak_alloc+0x30/0x40\n    ___kmalloc_large_node+0x140/0x188\n    __kmalloc_large_node_noprof+0x2c/0x13c\n    __kmalloc_noprof+0x48/0x4c0\n    pvr_fw_init+0xb0c/0x1f50 [powervr]",
  "id": "GHSA-ffcr-3gvq-xq62",
  "modified": "2025-11-07T00:30:26Z",
  "published": "2025-05-01T15:31:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-37764"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/490c30fd554597e78f66650044877e7defb5f83c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/891c12ba855ccb34c06a2e5da75c644683087036"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a5b230e7f3a55bd8bd8d012eec75a4b7baa671d5"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2025-37764 (GCVE-0-2025-37764)

Vulnerability from cvelistv5 – Published: 2025-05-01 13:07 – Updated: 2025-05-26 05:20

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of firmware image processing when the module is unloaded. Fix the related issue of the same memory being leaked if processing of the firmware image fails during module load. Ensure all firmware GEM objects are destroyed if firmware image processing fails. Fixes memory leaks on powervr module unload detected by Kmemleak: unreferenced object 0xffff000042e20000 (size 94208): comm "modprobe", pid 470, jiffies 4295277154 hex dump (first 32 bytes): 02 ae 7f ed bf 45 84 00 3c 5b 1f ed 9f 45 45 05 .....E..<[...EE. d5 4f 5d 14 6c 00 3d 23 30 d0 3a 4a 66 0e 48 c8 .O].l.=#0.:Jf.H. backtrace (crc dd329dec): kmemleak_alloc+0x30/0x40 ___kmalloc_large_node+0x140/0x188 __kmalloc_large_node_noprof+0x2c/0x13c __kmalloc_noprof+0x48/0x4c0 pvr_fw_init+0xaa4/0x1f50 [powervr] unreferenced object 0xffff000042d20000 (size 20480): comm "modprobe", pid 470, jiffies 4295277154 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 09 00 00 00 0b 00 00 00 ................ 00 00 00 00 00 00 00 00 07 00 00 00 08 00 00 00 ................ backtrace (crc 395b02e3): kmemleak_alloc+0x30/0x40 ___kmalloc_large_node+0x140/0x188 __kmalloc_large_node_noprof+0x2c/0x13c __kmalloc_noprof+0x48/0x4c0 pvr_fw_init+0xb0c/0x1f50 [powervr]

Severity ?

No CVSS data available.

Assigner

Linux

References

URL

Tags

	https://git.kernel.org/stable/c/490c30fd554597e78…
	https://git.kernel.org/stable/c/891c12ba855ccb34c…
	https://git.kernel.org/stable/c/a5b230e7f3a55bd8b…

Impacted products

Vendor

Product

Version

Linux

Affected: cc1aeedb98ad347c06ff59e991b2f94dfb4c565d , < 490c30fd554597e78f66650044877e7defb5f83c (git)
Affected: cc1aeedb98ad347c06ff59e991b2f94dfb4c565d , < 891c12ba855ccb34c06a2e5da75c644683087036 (git)
Affected: cc1aeedb98ad347c06ff59e991b2f94dfb4c565d , < a5b230e7f3a55bd8bd8d012eec75a4b7baa671d5 (git)

Linux

Affected: 6.8
Unaffected: 0 , < 6.8 (semver)
Unaffected: 6.12.25 , ≤ 6.12.* (semver)
Unaffected: 6.14.4 , ≤ 6.14.* (semver)
Unaffected: 6.15 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/imagination/pvr_fw.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "490c30fd554597e78f66650044877e7defb5f83c",
              "status": "affected",
              "version": "cc1aeedb98ad347c06ff59e991b2f94dfb4c565d",
              "versionType": "git"
            },
            {
              "lessThan": "891c12ba855ccb34c06a2e5da75c644683087036",
              "status": "affected",
              "version": "cc1aeedb98ad347c06ff59e991b2f94dfb4c565d",
              "versionType": "git"
            },
            {
              "lessThan": "a5b230e7f3a55bd8bd8d012eec75a4b7baa671d5",
              "status": "affected",
              "version": "cc1aeedb98ad347c06ff59e991b2f94dfb4c565d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/imagination/pvr_fw.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.8"
            },
            {
              "lessThan": "6.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.25",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.14.*",
              "status": "unaffected",
              "version": "6.14.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.25",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14.4",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: fix firmware memory leaks\n\nFree the memory used to hold the results of firmware image processing\nwhen the module is unloaded.\n\nFix the related issue of the same memory being leaked if processing\nof the firmware image fails during module load.\n\nEnsure all firmware GEM objects are destroyed if firmware image\nprocessing fails.\n\nFixes memory leaks on powervr module unload detected by Kmemleak:\n\nunreferenced object 0xffff000042e20000 (size 94208):\n  comm \"modprobe\", pid 470, jiffies 4295277154\n  hex dump (first 32 bytes):\n    02 ae 7f ed bf 45 84 00 3c 5b 1f ed 9f 45 45 05  .....E..\u003c[...EE.\n    d5 4f 5d 14 6c 00 3d 23 30 d0 3a 4a 66 0e 48 c8  .O].l.=#0.:Jf.H.\n  backtrace (crc dd329dec):\n    kmemleak_alloc+0x30/0x40\n    ___kmalloc_large_node+0x140/0x188\n    __kmalloc_large_node_noprof+0x2c/0x13c\n    __kmalloc_noprof+0x48/0x4c0\n    pvr_fw_init+0xaa4/0x1f50 [powervr]\n\nunreferenced object 0xffff000042d20000 (size 20480):\n  comm \"modprobe\", pid 470, jiffies 4295277154\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 09 00 00 00 0b 00 00 00  ................\n    00 00 00 00 00 00 00 00 07 00 00 00 08 00 00 00  ................\n  backtrace (crc 395b02e3):\n    kmemleak_alloc+0x30/0x40\n    ___kmalloc_large_node+0x140/0x188\n    __kmalloc_large_node_noprof+0x2c/0x13c\n    __kmalloc_noprof+0x48/0x4c0\n    pvr_fw_init+0xb0c/0x1f50 [powervr]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-26T05:20:22.513Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/490c30fd554597e78f66650044877e7defb5f83c"
        },
        {
          "url": "https://git.kernel.org/stable/c/891c12ba855ccb34c06a2e5da75c644683087036"
        },
        {
          "url": "https://git.kernel.org/stable/c/a5b230e7f3a55bd8bd8d012eec75a4b7baa671d5"
        }
      ],
      "title": "drm/imagination: fix firmware memory leaks",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-37764",
    "datePublished": "2025-05-01T13:07:05.694Z",
    "dateReserved": "2025-04-16T04:51:23.938Z",
    "dateUpdated": "2025-05-26T05:20:22.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-FFCR-3GVQ-XQ62

CVE-2025-37764 (GCVE-0-2025-37764)

Tags

Sightings

Nomenclature