CVE-2025-21995 - drm/sched: Fix fence reference count leak

MEDIUM

drm/sched: Fix fence reference count leak

Published Apr 3, 2025

6.1

MEDIUM

CVSS 3.1

EPSS 0.19%

The last_scheduled fence leaks when an entity is being killed and adding the cleanup callback fails.

Decrement the reference count of prev when dma_fence_add_callback() fails, ensuring proper balance.

[phasta: add git tag info for stable kernel]

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 9	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-401

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2025-21995		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2357139		Issue Tracking
https://git.kernel.org/stable/c/1135a9431160575466ea9ac37ebd756ecbe35fff		Patch
https://git.kernel.org/stable/c/35399c84dcedd6d31448fb9e1336ef52673f2882		Patch
https://git.kernel.org/stable/c/a952f1ab696873be124e31ce5ef964d36bce817f		Patch
https://git.kernel.org/stable/c/c76bd3c99293834de7d1dca5de536616d5655e38		Patch
https://lore.kernel.org/linux-cve-announce/2025040346-CVE-2025-21995-64c3@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-21995
https://www.cve.org/CVERecord?id=CVE-2025-21995