Linux Kernel Radeon DRM Driver Double Free Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Radeon Direct Rendering Manager (DRM) driver can lead to a double free error. This issue arises because the driver's main structure is now managed by the device management system, and improperly freeing it can cause problems if the driver probe fails. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can cause a double free error, which may lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by loading the Radeon DRM driver and causing the driver probe to fail. This will trigger the device management system to clean up the driver's main structure. If the structure has already been freed manually, it can result in a double free error.

Remediation

Users can upgrade to the latest version of the Linux kernel, where this vulnerability has been addressed.

Added: Dec 16, 2025, 5:10 PM
Updated: Dec 16, 2025, 5:10 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.8
remediation
7.7
relevance
1.5
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.