CVE-2025-40111
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmw_execbuf_process. All nodes are expected to be cleared in vmw_validation_drop_ht but this node escaped because its resource was destroyed prematurely.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux1822e5287b7dfa59d0af966756ebf1dc652b60ee, fb7165e5f3b3b10721ff70553583ad12e90e447a, 4c918f9d1ccccc0e092f43dcb2d8266f54d7340b, 9a8eaca539708ca532747f606d231f70e684e8ca, 867bda5d95d36f10da398fd4409e21c7002b2332, 655a2f29bfc21105c80bf8a7d7aafa6eca8b4496, 65608e991c2d771c13404e5c7ae122ac3c3357a4, dfe1323ab3c8a4dd5625ebfdba44dc47df84512a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 64ad2abfe9a628ce79859d072704bd1ef7682044 ≤ v < 1822e5287b7dfa59d0af966756ebf1dc652b60ee, 64ad2abfe9a628ce79859d072704bd1ef7682044 ≤ v < fb7165e5f3b3b10721ff70553583ad12e90e447a, 64ad2abfe9a628ce79859d072704bd1ef7682044 ≤ v < 4c918f9d1ccccc0e092f43dcb2d8266f54d7340b, 64ad2abfe9a628ce79859d072704bd1ef7682044 ≤ v < 9a8eaca539708ca532747f606d231f70e684e8ca, 64ad2abfe9a628ce79859d072704bd1ef7682044 ≤ v < 867bda5d95d36f10da398fd4409e21c7002b2332, 64ad2abfe9a628ce79859d072704bd1ef7682044 ≤ v < 655a2f29bfc21105c80bf8a7d7aafa6eca8b4496, 64ad2abfe9a628ce79859d072704bd1ef7682044 ≤ v < 65608e991c2d771c13404e5c7ae122ac3c3357a4, 64ad2abfe9a628ce79859d072704bd1ef7682044 ≤ v < dfe1323ab3c8a4dd5625ebfdba44dc47df84512a, 4.20 | 1822e5287b7dfa59d0af966756ebf1dc652b60ee, fb7165e5f3b3b10721ff70553583ad12e90e447a, 4c918f9d1ccccc0e092f43dcb2d8266f54d7340b, 9a8eaca539708ca532747f606d231f70e684e8ca, 867bda5d95d36f10da398fd4409e21c7002b2332, 655a2f29bfc21105c80bf8a7d7aafa6eca8b4496, 65608e991c2d771c13404e5c7ae122ac3c3357a4, dfe1323ab3c8a4dd5625ebfdba44dc47df84512a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.