Fence Leak Vulnerability in Linux Kernel - Impacting Debian Packages
Summary
CVE-2025-38410: In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we could unref the submit without calling drm_sched_entity_push_job(), so msm_job_free()... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various distributions, including Debian, which is known for its stability and extensive package repository. The Linux kernel's functionality includes process management, memory management, device drivers, and system calls. This specific vulnerability affects the kernel's Direct Rendering Manager (DRM) subsystem, particularly the MSM (Mobile Station Modem) driver, which is crucial for graphics rendering in devices.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified within the DRM subsystem related to the MSM driver. The issue arises during error handling paths where the submission of jobs can lead to a fence leak. Specifically, if a submission is unreferenced without properly calling drm_sched_entity_push_job(), the cleanup function msm_job_free() is never executed. This oversight can result in resource leaks and potential instability in the graphics rendering process. The vulnerability has been assigned the identifier CVE-2025-38410 and was published on July 25, 2025.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are encouraged to apply the patch as soon as it becomes available to mitigate any potential risks.
Conclusion
The CVE-2025-38410 vulnerability in the Linux kernel's DRM subsystem poses a significant risk to systems running affected Debian packages. Users are urged to update their kernel to the patched version to ensure system stability and security. Regular monitoring and updates are essential to protect against potential vulnerabilities.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38410 is a vulnerability in the Linux kernel's DRM subsystem, specifically affecting the MSM driver, which can lead to resource leaks during error handling.
You can use Vulert, a tool that monitors open-source vulnerabilities in your software. By uploading your manifest file, you can check if your application is affected by CVE-2025-38410.
If exploited, this vulnerability could lead to resource leaks, instability in graphics rendering, and potentially impact the overall performance of the system.
Yes, a patch is available for Debian 13 in version 6.12.37-1. Users should update their kernel to this version to mitigate the vulnerability.
It is recommended to check for updates regularly, at least once a week, to ensure that all vulnerabilities are addressed promptly.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
