Vulnerability in Linux

CVE-2025-68235

In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot nvkm_falcon_fw::boot is allocated, but no one frees it. This causes a kmemleak warning. Make sure this data is deallocated.

EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 2541626cfb794e57ba0575a6920826f591f7ced0, 6.2, 0

References