CVE-2025-68235 | BDVDB-2026-306368 Detail

LinuxLinux

Description#

In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot nvkm_falcon_fw::boot is allocated, but no one frees it. This causes a kmemleak warning. Make sure this data is deallocated.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

Exploit#

No public exploit known

History#

Version 12025-12-16Record published in the CVE List.
Version 22026-05-11Most recent update recorded in the CVE List.

Published

Published: 2025-12-16
Last modified: 2026-05-11

Vendor information

Vendor: Linux
Product: Linux

All Linux vulnerabilities

Score

No score available.

EPSS

less than 1%, Very Low

Estimated chance of exploitation in the next 30 days. EPSS percentile: 8.3.

KEV

Not listed in the CISA Known Exploited Vulnerabilities catalog.

Impact

Not classified

Action

No specific action is recorded in the source data. Check the references for vendor guidance.

Affected Systems

Vulnerable
>= 2541626cfb794e57ba0575a6920826f591f7ced0 and < 7d1977b4ae5c50e1aafc5c51500fc08bd7afd6a0
Fixed
7d1977b4ae5c50e1aafc5c51500fc08bd7afd6a0
Vulnerable
>= 2541626cfb794e57ba0575a6920826f591f7ced0 and < 6492add9a3a163d5e0390428d2636adc3e61b883
Fixed
6492add9a3a163d5e0390428d2636adc3e61b883
Vulnerable
>= 2541626cfb794e57ba0575a6920826f591f7ced0 and < 2bba02a39bfb383bd1a95868d532c0917e38f9e7
Fixed
2bba02a39bfb383bd1a95868d532c0917e38f9e7
Vulnerable
>= 2541626cfb794e57ba0575a6920826f591f7ced0 and < 949f1fd2225baefbea2995afa807dba5cbdb6bd3
Fixed
949f1fd2225baefbea2995afa807dba5cbdb6bd3
Vulnerable
6.2
Fixed
Not stated
Vulnerable
Not stated
Fixed
0
Vulnerable
Not stated
Fixed
6.6.118
Vulnerable
Not stated
Fixed
6.12.60

Scoring System

CVSS v4.0

Not available

CVSS v3.1

Not available

CVSS v3.0

Not available

CVSS v2

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).