Not yet scoredPublished Dec 16, 2025

CVE-2025-68252misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup

Updated under an hour ago (Oct 26, 2026, 10:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup In fastrpc_map_lookup, dma_buf_get is called to obtain a reference to the dma_buf for comparison purposes. However, this reference is never released when the function returns, leading to a dma_buf memory leak. Fix this by adding dma_buf_put before returning from the function, ensuring that the temporarily acquired reference is properly released regardless of whether a matching map is found. Rule: add

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ec5cb80503bbfee67573699fe52fcf456fd57678 before c2fef5ebb73f3dabae6fbc571d181914ed32c483; from 6e0d6cc39f410a4d9ea774fbb254c68fe02ff4bb before 9a297a68c3ba4a7ecb31ed52f61bd6634abb79d3; from 6e0928a8988e873da9946e17f8065ad77c720186 before e17b13387827adce7acb19ac0f07f9bcafe0ff4c; 1986bba9597b3d97d3e80530dc457a1cd1994e22 builds before 214e81a63a9aa0be42382ef0365ba5ed32c513ab; from 9031626ade38b092b72638dfe0c6ffce8d8acd43 before fff111bf45cbeeb659324316d68554e35d350092	CNA record

References

References

https://git.kernel.org/stable/c/c2fef5ebb73f3dabae6fbc571d181914ed32c483
https://git.kernel.org/stable/c/9a297a68c3ba4a7ecb31ed52f61bd6634abb79d3
https://git.kernel.org/stable/c/e17b13387827adce7acb19ac0f07f9bcafe0ff4c
https://git.kernel.org/stable/c/214e81a63a9aa0be42382ef0365ba5ed32c513ab
https://git.kernel.org/stable/c/fff111bf45cbeeb659324316d68554e35d350092

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.