CVE-2025-40017

{
  "id": "CVE-2025-40017",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2025-10-20T16:15:38.510",
  "lastModified": "2026-10-19T21:10:00.160",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: iris: Fix memory leak by freeing untracked persist buffer\n\nOne internal buffer which is allocated only once per session was not\nbeing freed during session close because it was not being tracked as\npart of internal buffer list which resulted in a memory leak.\n\nAdd the necessary logic to explicitly free the untracked internal buffer\nduring session close to ensure all allocated memory is released\nproperly."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmedia: iris: Corrección de fuga de memoria liberando el búfer persistente no rastreado\n\nUn búfer interno que se asignaba solo una vez por sesión no se liberaba durante el cierre de la sesión porque no se estaba rastreando como parte de la lista de búferes internos, lo que resultó en una fuga de memoria.\n\nAñadir la lógica necesaria para liberar explícitamente el búfer interno no rastreado durante el cierre de la sesión para asegurar que toda la memoria asignada se libere correctamente."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/media/platform/qcom/iris/iris_buffer.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "73702f45db81b74897b2808aaa13484826156006",
              "lessThan": "c9e024e907cafafd6b094f69a0d0f5d18fd28876",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "73702f45db81b74897b2808aaa13484826156006",
              "lessThan": "ec2f87ad035e8d1ad67567542842f1f23a4dbde2",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "73702f45db81b74897b2808aaa13484826156006",
              "lessThan": "02a24f13b3a1d9da9f3de56aa5fdb7cc1fe167a2",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/media/platform/qcom/iris/iris_buffer.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.15",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.15",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.16.11",
              "lessThanOrEqual": "6.16.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.17.1",
              "lessThanOrEqual": "6.17.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/02a24f13b3a1d9da9f3de56aa5fdb7cc1fe167a2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c9e024e907cafafd6b094f69a0d0f5d18fd28876",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ec2f87ad035e8d1ad67567542842f1f23a4dbde2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}