CVE-2025-40011

CVE-2025-40011

published October 20, 2025

CVSS
—
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/gma500: Fix null dereference in hdmi teardown

pci_set_drvdata sets the value of pdev->driver_data to NULL,

after which the driver_data obtained from the same dev is

dereferenced in oaktrail_hdmi_i2c_exit, and the i2c_dev is

extracted from it. To prevent this, swap these calls.

Found by Linux Verification Center (linuxtesting.org) with Svacer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.6th percentile
Published
2025-10-20T20:15Z
References (8)
EPSS history
Timeline
  • 20 OCT 15:26Z
    drm/gma500: Fix null dereference in hdmi teardown
    cvelistv5