Medium 5.5Published Sep 5, 2025

CVE-2025-39679drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().

Updated under an hour ago (Oct 26, 2026, 11:10 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). When the nvif_vmm_type is invalid, we will return error directly without freeing the args in nvif_vmm_ctor(), which leading a memory leak. Fix it by setting the ret -EINVAL and goto done.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 6b252cf42281045a9f803d2198023500cfa6ebd2 before 72553fe19317fe93cb8591c83095c446bc7fe292; from 6b252cf42281045a9f803d2198023500cfa6ebd2 before cabcb52d76d3d42f16c344a96e098dd9d18602f8; from 6b252cf42281045a9f803d2198023500cfa6ebd2 before 7d9110e3b35d08832661da1a1fc2d24455981a04; from 6b252cf42281045a9f803d2198023500cfa6ebd2 before bb8aeaa3191b617c6faf8ae937252e059673b7ea	CNA record
linux linux_kernel linux:linux_kernel	from 6.6 before 6.6.103; from 6.7 before 6.12.44; from 6.13 before 6.16.4; 6.17; 6.17	NVD

References

References

https://git.kernel.org/stable/c/72553fe19317fe93cb8591c83095c446bc7fe292	patch
https://git.kernel.org/stable/c/cabcb52d76d3d42f16c344a96e098dd9d18602f8	patch
https://git.kernel.org/stable/c/7d9110e3b35d08832661da1a1fc2d24455981a04	patch
https://git.kernel.org/stable/c/bb8aeaa3191b617c6faf8ae937252e059673b7ea	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.