PT-2025-14588 · Linux+6 · Linux Kernel+6

Published 2025-03-11 · Updated 2026-05-22 · CVE-2025-21995

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak has been identified in the Linux kernel, specifically in the drm/sched component. The issue occurs when an entity is being killed and the cleanup callback fails, resulting in a leak of the last scheduled fence. To address this, the reference count of prev is decremented when dma fence add callback() fails, ensuring proper balance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

CWE-911

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-5786

AZL-60264

BDU:2025-11627

CVE-2025-21995

MGASA-2025-0142

MGASA-2025-0146

OESA-2026-2417

OESA-2026-2418

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20206-1

SUSE-SU-2025:20270-1

SUSE-SU-2025:20283-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1916

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21995.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-39955 · Security Note
• https://ubuntu.com/security/CVE-2025-22004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21976 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7801-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21905 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-37889 · Security Note
• https://ubuntu.com/security/CVE-2025-39735 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31447 · Security Note
• https://ubuntu.com/security/CVE-2025-22095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40254 · Security Note
• https://ubuntu.com/security/CVE-2025-22039 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38721 · Security Note