CVE-2025-71315 drm/vkms: Convert to DRM's vblank timer
The Linux kernel DRM virtual KMS driver was refactored to use standard vblank timers, resolving internal implementation inconsistencies without stating a specific security impact.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-71315?
CVE-2025-71315 is a medium-severity vulnerability in Linux kernel, published on 8 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/vkms: Convert to DRM's vblank timer
Replace vkms' vblank timer with the DRM implementation. The DRM code is identical in concept, but differs in implementation.
Vblank timers are covered in vblank helpers and initializer macros, so remove the corresponding hrtimer in struct vkms_output. The vblank timer calls vkms' custom timeout code via handle_vblank_timeout in struct drm_crtc_helper_funcs.
Which versions are affected by CVE-2025-71315?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-71315?
Apply the vendor's patch.
Is CVE-2025-71315 being exploited?
There is no known exploitation of CVE-2025-71315 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-89643, BELL-CVE-2025-71315, DEBIAN-CVE-2025-71315, GHSA-rmvc-98rw-854q, ROOT-OS-DEBIAN-11-CVE-2025-71315, ROOT-OS-DEBIAN-12-CVE-2025-71315 and 4 more.