CVE-2025-68235

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot nvkm_falcon_fw::boot is allocated, but no one frees it. This causes a kmemleak warning. Make sure this data is deallocated.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 16, 2025
First seenDec 16, 2025

How to fix

Update
  • Linux Linux7d1977b4ae5c50e1aafc5c51500fc08bd7afd6a0, 6492add9a3a163d5e0390428d2636adc3e61b883, 2bba02a39bfb383bd1a95868d532c0917e38f9e7, 949f1fd2225baefbea2995afa807dba5cbdb6bd3 or later

Affected products

ProductAffected versionsFixed in
Linux Linux2541626cfb794e57ba0575a6920826f591f7ced0 ≤ v < 7d1977b4ae5c50e1aafc5c51500fc08bd7afd6a0, 2541626cfb794e57ba0575a6920826f591f7ced0 ≤ v < 6492add9a3a163d5e0390428d2636adc3e61b883, 2541626cfb794e57ba0575a6920826f591f7ced0 ≤ v < 2bba02a39bfb383bd1a95868d532c0917e38f9e7, 2541626cfb794e57ba0575a6920826f591f7ced0 ≤ v < 949f1fd2225baefbea2995afa807dba5cbdb6bd3, 6.27d1977b4ae5c50e1aafc5c51500fc08bd7afd6a0, 6492add9a3a163d5e0390428d2636adc3e61b883, 2bba02a39bfb383bd1a95868d532c0917e38f9e7, 949f1fd2225baefbea2995afa807dba5cbdb6bd3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-68235 · Linux · Dark Radar