CVE-2025-40111
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-40111
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40111.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-40111
- Downstream
- Published
- 2025-11-12T01:07:25.203Z
- Modified
- 2025-11-28T02:35:34.578310Z
- Summary
- drm/vmwgfx: Fix Use-after-free in validation
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix Use-after-free in validation
Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in vmwvalidationdrop_ht but this node escaped because its resource was destroyed prematurely.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40111.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/1822e5287b7dfa59d0af966756ebf1dc652b60ee
- https://git.kernel.org/stable/c/4c918f9d1ccccc0e092f43dcb2d8266f54d7340b
- https://git.kernel.org/stable/c/655a2f29bfc21105c80bf8a7d7aafa6eca8b4496
- https://git.kernel.org/stable/c/65608e991c2d771c13404e5c7ae122ac3c3357a4
- https://git.kernel.org/stable/c/867bda5d95d36f10da398fd4409e21c7002b2332
- https://git.kernel.org/stable/c/9a8eaca539708ca532747f606d231f70e684e8ca
- https://git.kernel.org/stable/c/dfe1323ab3c8a4dd5625ebfdba44dc47df84512a
- https://git.kernel.org/stable/c/fb7165e5f3b3b10721ff70553583ad12e90e447a
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40111.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-40111
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced64ad2abfe9a628ce79859d072704bd1ef7682044Fixed1822e5287b7dfa59d0af966756ebf1dc652b60eeFixedfb7165e5f3b3b10721ff70553583ad12e90e447aFixed4c918f9d1ccccc0e092f43dcb2d8266f54d7340bFixed9a8eaca539708ca532747f606d231f70e684e8caFixed867bda5d95d36f10da398fd4409e21c7002b2332Fixed655a2f29bfc21105c80bf8a7d7aafa6eca8b4496Fixed65608e991c2d771c13404e5c7ae122ac3c3357a4Fixeddfe1323ab3c8a4dd5625ebfdba44dc47df84512a
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced4.20.0Fixed5.4.301
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.246
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.195
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.157
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.113
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.54
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.17.4