Linux Kernel Vulnerability in drm/msm Affects Multiple Products

CVE-2025-39747

What is CVE-2025-39747?

A recent vulnerability within the Linux kernel, specifically in the drm/msm component, concerns improper error handling during memory allocation. The function msm_ioctl_gem_info_set_metadata() failed to manage errors from the krealloc function adequately, which could lead to potential NULL pointer dereference. The update mitigates this risk by ensuring that any failure during memory allocation returns an appropriate -ENOMEM error. This improvement not only prevents crashes but also addresses deadlock risks tied to improper allocation. The thorough patchwork addressing this issue can enhance overall system stability and security.

References