CVE-2025-38363

drm/tegra: Fix a possible null pointer dereference

MEDIUM
5.5
CVSS Score
Published: July 25, 2025 at 12:47 PM UTC
Updated: June 17, 2026 at 09:16 AM UTC
2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegra_crtc_reset(), new memory is allocated with kzalloc(), but no check is performed. Before calling __drm_atomic_helper_crtc_reset, state should be checked to prevent possible null pointer dereference.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.11 ≤ v < 5.15.1875.16 ≤ v < 6.1.1435.3 ≤ v < 5.10.2405.3 ≤ v < 5.15.1875.3 ≤ v < 6.1.1435.3 ≤ v < 6.12.365.3 ≤ v < 6.15.55.3 ≤ v < 6.165.3 ≤ v < 6.6.966.13 ≤ v < 6.15.56.2 ≤ v < 6.6.966.7 ≤ v < 6.12.365.3b7e0b04ae450a0f2f73c376c3057fb05d798e33c
Vendor states this is fixed in 31ac2c680a8ac11dc54a5b339a07e138bcedd924 (fixed)
Vendor states this is fixed in 5ff3636bcc32e1cb747f6f820bcf2bb6990a7d41 (fixed)
Vendor states this is fixed in 780351a5f61416ed2ba1199cc57e4a076fca644d (fixed)
Vendor states this is fixed in 99a25fc7933b88d5e16668bf6ba2d098e1754406 (fixed)
Vendor states this is fixed in ab390ab81241cf8bf37c0a0ac2e9c6606bf3e991 (fixed)
Vendor states this is fixed in ac4ca634f0c9f227538711d725339293f7047b02 (fixed)
Vendor states this is fixed in c7fc459ae6f988e0d5045a270bd600ab08bc61f1 (fixed)
Vendor states this is fixed in 5.10.240 (unaffected)
Vendor states this is fixed in 5.15.187 (unaffected)
Vendor states this is fixed in 5.3 (unaffected)
Vendor states this is fixed in 6.1.143 (unaffected)
Vendor states this is fixed in 6.12.36 (unaffected)
Vendor states this is fixed in 6.15.5 (unaffected)
Vendor states this is fixed in 6.16 (unaffected)
Vendor states this is fixed in 6.6.96 (unaffected)

References (9)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/31ac2c680a8ac11dc54a5b339a07e138bcedd924
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5ff3636bcc32e1cb747f6f820bcf2bb6990a7d41
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/780351a5f61416ed2ba1199cc57e4a076fca644d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/99a25fc7933b88d5e16668bf6ba2d098e1754406
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ab390ab81241cf8bf37c0a0ac2e9c6606bf3e991
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ac4ca634f0c9f227538711d725339293f7047b02
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c7fc459ae6f988e0d5045a270bd600ab08bc61f1
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card