CVE-2025-38240

drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr

published April 18, 2025

CVSS
—
EPSS
0%
Percentile
17.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr

The function mtk_dp_wait_hpd_asserted() may be called before the

`mtk_dp->drm_dev` pointer is assigned in mtk_dp_bridge_attach().

Specifically it can be called via this callpath:

- mtk_edp_wait_hpd_asserted

- [panel probe]

- dp_aux_ep_probe

Using "drm" level prints anywhere in this callpath causes a NULL

pointer dereference. Change the error message directly in

mtk_dp_wait_hpd_asserted() to dev_err() to avoid this. Also change the

error messages in mtk_dp_parse_capabilities(), which is called by

mtk_dp_wait_hpd_asserted().

While touching these prints, also add the error code to them to make

future debugging easier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.2th percentile
Published
2025-04-18T07:01Z
EPSS history
Timeline
  • 18 APR 07:01Z
    drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
    cvelistv5