High 7.8Published Dec 16, 2025

CVE-2025-68181drm/radeon: Remove calls to drm_put_dev()

Updated under an hour ago (2026-10-19 06:20 UTC)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since the allocation of the drivers main structure was changed to devm_drm_dev_alloc() drm_put_dev()'ing to trigger it to be free'd should be done by devres. However, drm_put_dev() is still in the probe error and device remove paths. When the driver fails to probe warnings like the following are shown because devres is trying to drm_put_dev() after the driver already did it. [ 5.642230] radeon 0000:01:05.0: probe with driver radeon failed with error -22 [ 5.649605] ------------[ cut here ]------------ [ 5.649607] refcount_t: underflow; use-after-free. [ 5.649620] WARNING: CPU: 0 PID: 357 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110 (cherry picked from commit 3eb8c0b4c091da0a623ade0d3ee7aa4a93df1ea4)

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a9ed2f052c5c14e4be58c5ec8794dffc87588123 before 2fa41445d8c98f2a65503c373796466496edc0e7; from a9ed2f052c5c14e4be58c5ec8794dffc87588123 before ec18f6b2c743cc471b2539ddb5caed20a012e640; from a9ed2f052c5c14e4be58c5ec8794dffc87588123 before 745bae76acdd71709773c129a69deca01036250b	CNA record

References

https://git.kernel.org/stable/c/2fa41445d8c98f2a65503c373796466496edc0e7
https://git.kernel.org/stable/c/ec18f6b2c743cc471b2539ddb5caed20a012e640
https://git.kernel.org/stable/c/745bae76acdd71709773c129a69deca01036250b

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.