Device Use-After-Free Vulnerability in Mediatek DRM Driver for Linux Kernel

CVE-2025-40316

What is CVE-2025-40316?

A vulnerability exists in the Mediatek DRM (Direct Rendering Manager) driver within the Linux kernel, identified as a device use-after-free issue. This flaw arises due to a reference imbalance caused when the driver attempts to unbind, particularly when a previous fix did not adequately address reference management during the component driver binding process. As a result, if errors occur during binding and unbinding, this could permit unauthorized access or modification of freed memory, posing significant risks to system stability and security.

References