CVE-2025-71315

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. The DRM code is identical in concept, but differs in implementation. Vblank timers are covered in vblank helpers and initializer macros, so remove the corresponding hrtimer in struct vkms_output. The vblank timer calls vkms' custom timeout code via handle_vblank_timeout in struct drm_crtc_helper_funcs.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/02e2681ffe1addde1fc8c35d05657b16bfa79613	Patch
https://git.kernel.org/stable/c/a0582cc923985c6b72fe871b5f7aa7c682bfc230	Patch

Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-06-08 16:16

Updated : 2026-07-23 07:10

NVD link : CVE-2025-71315

Mitre link : CVE-2025-71315

CVE.ORG link : CVE-2025-71315

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2025-71315", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3a0709928b172a4123a76078f70e0a706265690c", "lessThan": "a0582cc923985c6b72fe871b5f7aa7c682bfc230", "versionType": "git"}, {"status": "affected", "version": "3a0709928b172a4123a76078f70e0a706265690c", "lessThan": "02e2681ffe1addde1fc8c35d05657b16bfa79613", "versionType": "git"}], "programFiles": ["drivers/gpu/drm/vkms/vkms_crtc.c", "drivers/gpu/drm/vkms/vkms_drv.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.19"}, {"status": "unaffected", "version": "0", "lessThan": "4.19", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.34", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/gpu/drm/vkms/vkms_crtc.c", "drivers/gpu/drm/vkms/vkms_drv.h"], "defaultStatus": "affected"}]}], "published": "2026-06-08T16:16:33.500", "references": [{"url": "https://git.kernel.org/stable/c/02e2681ffe1addde1fc8c35d05657b16bfa79613", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a0582cc923985c6b72fe871b5f7aa7c682bfc230", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vkms: Convert to DRM's vblank timer\n\nReplace vkms' vblank timer with the DRM implementation. The DRM\ncode is identical in concept, but differs in implementation.\n\nVblank timers are covered in vblank helpers and initializer macros,\nso remove the corresponding hrtimer in struct vkms_output. The\nvblank timer calls vkms' custom timeout code via handle_vblank_timeout\nin struct drm_crtc_helper_funcs."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/vkms: Convertir al temporizador vblank de DRM\n\nReemplazar el temporizador vblank de vkms con la implementaci\u00f3n de DRM. El c\u00f3digo de DRM es id\u00e9ntico en concepto, pero difiere en implementaci\u00f3n.\n\nLos temporizadores vblank est\u00e1n cubiertos en las funciones de ayuda vblank y las macros inicializadoras, as\u00ed que eliminar el hrtimer correspondiente en la estructura vkms_output. El temporizador vblank llama al c\u00f3digo de tiempo de espera personalizado de vkms a trav\u00e9s de handle_vblank_timeout en la estructura drm_crtc_helper_funcs."}], "lastModified": "2026-07-23T07:10:00.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDE475CD-6157-49FF-8571-10BDC3180DF3", "versionEndExcluding": "6.18.34", "versionStartIncluding": "4.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}