CVE-2025-22096 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: Fix error code msm_parse_deps() The SUBMIT_ERROR() macro turns the error code negative. This extra '-' operation turns it back to positive EINVAL again. The error code is passed to ERR_PTR() and since positive values are not an IS_ERR() it eventually will lead to an oops. Delete the '-'. Patchwork: https://patchwork.freedesktop.org/patch/637625/
A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) for the MSM (Mobile Station Modem) graphics driver has been addressed. The issue arose in the error handling of the 'msm_parse_deps()' function, where the SUBMIT_ERROR() macro incorrectly transformed the error code into a negative value. This negative value was then reverted back to a positive EINVAL, which was improperly processed by the ERR_PTR() function. Positive error codes are not recognized as errors, leading to a system crash (oops). The vulnerability has been fixed by removing the erroneous negative transformation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0b305b7cadce835505bd93183a599acb1f800a05 | kernel.org | Patch |
| https://git.kernel.org/stable/c/efe759dcf3352d8379a1adad7b4d14044a4c41a7 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.14, < 6.14.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 4, 2025 | Initial Analysis | [email protected] |
| Apr 16, 2025 | New CVE Received | kernel.org |