Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68235

In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot nvkm_falcon_fw::boot is allocated, but no one frees it. This causes a kmemleak warning. Make sure this data is deallocated.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9d51f8cf542c4912eb859c9696d8e080002c151d2965b42dbad0e28451eb24f0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/nouveau/nvkm/falcon/fw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.118","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.60","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.10","versionType":"sem…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cea859e592878cf413443b53340c93bdede18d9ae418e1c7ad614fcd5b2ee515 · sha256:dbc82524f92f74b2… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/nouveau/nvkm/falcon/fw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7d1977b4ae5c50e1aafc5c51500fc08bd7afd6a0","status":"affected","version":"2541626cfb794e57ba0575a6920826f591f7ced0","versionType":"git"},{"lessThan":"6492add9a3a163d5e0390428d2636adc3e61b883","status":"affected","version":"2541626cfb794e57ba0575a6920826f591f7ced0","versionType":"git"},{"lessThan":"2bba02a39bfb383bd1a95868d532c0917e38f9e7","status":"affected","version":"25416…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cea859e592878cf413443b53340c93bdede18d9ae418e1c7ad614fcd5b2ee515 · sha256:dbc82524f92f74b2… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/nouveau/nvkm/falcon/fw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.118","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.60","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.10","versionType":"sem…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cea859e592878cf413443b53340c93bdede18d9ae418e1c7ad614fcd5b2ee515 · sha256:dbc82524f92f74b2… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/nouveau/nvkm/falcon/fw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7d1977b4ae5c50e1aafc5c51500fc08bd7afd6a0","status":"affected","version":"2541626cfb794e57ba0575a6920826f591f7ced0","versionType":"git"},{"lessThan":"6492add9a3a163d5e0390428d2636adc3e61b883","status":"affected","version":"2541626cfb794e57ba0575a6920826f591f7ced0","versionType":"git"},{"lessThan":"2bba02a39bfb383bd1a95868d532c0917e38f9e7","status":"affected","version":"25416…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cea859e592878cf413443b53340c93bdede18d9ae418e1c7ad614fcd5b2ee515 · sha256:dbc82524f92f74b2… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/2bba02a39bfb383bd1a95868d532c0917e38f9e7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cea859e592878cf413443b53340c93bdede18d9ae418e1c7ad614fcd5b2ee515 · sha256:dbc82524f92f74b2… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/6492add9a3a163d5e0390428d2636adc3e61b883"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cea859e592878cf413443b53340c93bdede18d9ae418e1c7ad614fcd5b2ee515 · sha256:dbc82524f92f74b2… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/7d1977b4ae5c50e1aafc5c51500fc08bd7afd6a0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cea859e592878cf413443b53340c93bdede18d9ae418e1c7ad614fcd5b2ee515 · sha256:dbc82524f92f74b2… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/949f1fd2225baefbea2995afa807dba5cbdb6bd3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cea859e592878cf413443b53340c93bdede18d9ae418e1c7ad614fcd5b2ee515 · sha256:dbc82524f92f74b2… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer