What’s Vulnerable › Vulnerabilities

CVE-2025-71315: drm/vkms: Convert to DRM's vblank timer

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-08 · updated 2026-07-23

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. The DRM code is identical in concept, but differs in implementation. Vblank timers are covered in vblank helpers and initializer macros, so remove the corresponding hrtimer in struct vkms_output. The vblank timer calls vkms' custom timeout code via handle_vblank_timeout in struct drm_crtc_helper_funcs.

Affected products

• Linux kernel: from 4.19 before 6.18.34 — fixed in 6.18.34

How to fix

Upgrade to a fixed version: Linux kernel 6.18.34. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/02e2681ffe1addde1fc8c35d05657b16bfa79613
• https://git.kernel.org/stable/c/a0582cc923985c6b72fe871b5f7aa7c682bfc230

Get alerted when CVE-2025-71315 or the next vulnerability affects your stack