Linux Kernel VRAM Leak Vulnerability in DRM/MSM Component

Vulnerability

A vulnerability in the Linux kernel's DRM/MSM component can lead to a VRAM leak when a subcomponent fails to bind. This issue occurs because the VRAM buffer is not released in such cases, potentially causing memory management problems. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can cause a memory leak in the VRAM, which may lead to increased memory usage and potential performance degradation.

Reproduction

The vulnerability can be reproduced by binding a GPU component that has not been properly initialized, causing the binding process to fail. This failure will result in the VRAM buffer not being released, creating a memory leak.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the latest kernel version can be found on the official Linux kernel website.

Added: Oct 4, 2025, 5:21 PM
Updated: Oct 4, 2025, 5:21 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
0.7
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.