CVE-2025-21978

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-04-01 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fix address space leak when Hyper-V DRM device is removed When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram, and maps it cacheable. If the device removed, or in the error path for device probing, the MMIO space is released but no unmap is done. Consequently the kernel address space for the mapping is leaked. Fix this by adding iounmap() calls in the device removal path, and in the error path during device probing.

Weakness Classification (1)

Affected Software (13)

VendorProductVersion
Linux Linux a0ab5abced550ddeefddb06055ed60779a54eb79 < c40cd24bfb9bfbb315c118ca14ebe6cf52e2dd1e
Linux Linux a0ab5abced550ddeefddb06055ed60779a54eb79 < ad27b4a51495490b815580d9b935e8eee14d1a9c
Linux Linux a0ab5abced550ddeefddb06055ed60779a54eb79 < 24f1bbfb2be77dad82489c1468bbb14312aab129
Linux Linux a0ab5abced550ddeefddb06055ed60779a54eb79 < 158242b56bf465a73e1edeac0fe828a8acad4499
Linux Linux a0ab5abced550ddeefddb06055ed60779a54eb79 < aed709355fd05ef747e1af24a1d5d78cd7feb81e
Linux Linux 6.0
linux linux_kernel 6.0 – 6.1.132
linux linux_kernel 6.14
linux linux_kernel 6.14
linux linux_kernel 6.14
linux linux_kernel 6.14
linux linux_kernel 6.14
linux linux_kernel 6.14

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001940
Percentile 9.1%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00194
2026-11-05
0.00194

Intelligence Sources

mitre ref →
nvd ref →