Bug 2360281 (CVE-2025-22096) - CVE-2025-22096 kernel: drm/msm/gem: Fix error code msm_parse_deps()
Summary: CVE-2025-22096 kernel: drm/msm/gem: Fix error code msm_parse_deps()
Keywords:
Status: NEW
Alias: CVE-2025-22096
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-04-16 15:06 UTC by OSIDB Bzimport
Modified: 2025-04-17 09:29 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-04-16 15:06:10 UTC 
In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: Fix error code msm_parse_deps()

The SUBMIT_ERROR() macro turns the error code negative.  This extra '-'
operation turns it back to positive EINVAL again.  The error code is
passed to ERR_PTR() and since positive values are not an IS_ERR() it
eventually will lead to an oops.  Delete the '-'.

Patchwork: https://patchwork.freedesktop.org/patch/637625/
Comment 1 Avinash Hanwate 2025-04-17 07:12:57 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025041619-CVE-2025-22096-f14d@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.