5.5

CVE-2025-38363

drm/tegra: Fix a possible null pointer dereference

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: Fix a possible null pointer dereference

In tegra_crtc_reset(), new memory is allocated with kzalloc(), but
no check is performed. Before calling __drm_atomic_helper_crtc_reset,
state should be checked to prevent possible null pointer dereference.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.3 < 5.10.240
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.187
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.143
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.96
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.36
Linux ≫ Linux Kernel Version >= 6.13 < 6.15.5
Debian ≫ Debian Linux Version11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.063
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/31ac2c680a8ac11dc54a5b339a07e138bcedd924
Patch
https://git.kernel.org/stable/c/5ff3636bcc32e1cb747f6f820bcf2bb6990a7d41
Patch
https://git.kernel.org/stable/c/780351a5f61416ed2ba1199cc57e4a076fca644d
Patch
https://git.kernel.org/stable/c/99a25fc7933b88d5e16668bf6ba2d098e1754406
Patch
https://git.kernel.org/stable/c/ab390ab81241cf8bf37c0a0ac2e9c6606bf3e991
Patch
https://git.kernel.org/stable/c/ac4ca634f0c9f227538711d725339293f7047b02
Patch
https://git.kernel.org/stable/c/c7fc459ae6f988e0d5045a270bd600ab08bc61f1
Patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
Third Party Advisory