CVE-2025-38597CWE-476

CVE-2025-38597

Medium · published August 19, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port

Each window of a vop2 is usable by a specific set of video ports, so while

binding the vop2, we look through the list of available windows trying to

find one designated as primary-plane and usable by that specific port.

The code later wants to use drm_crtc_init_with_planes with that found

primary plane, but nothing has checked so far if a primary plane was

actually found.

For whatever reason, the rk3576 vp2 does not have a usable primary window

(if vp0 is also in use) which brought the issue to light and ended in a

null-pointer dereference further down.

As we expect a primary-plane to exist for a video-port, add a check at

the end of the window-iteration and fail probing if none was found.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-08-19T21:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 5.19, < 6.15.106.15.10
linux/linux_kernel≥ 6.16, < 6.16.16.16.1
References (5)
EPSS history
Timeline
  • 19 AUG 17:03Z
    drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port
    cvelistv5