CVE-2025-40011

drm/gma500: Fix null dereference in hdmi teardown

N/A
Published: October 20, 2025 at 03:26 PM UTC
Updated: October 19, 2026 at 09:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix null dereference in hdmi teardown pci_set_drvdata sets the value of pdev->driver_data to NULL, after which the driver_data obtained from the same dev is dereferenced in oaktrail_hdmi_i2c_exit, and the i2c_dev is extracted from it. To prevent this, swap these calls. Found by Linux Verification Center (linuxtesting.org) with Svacer.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

1b082ccf5901108d3acd860a73d8c0442556c0bb3.3
Vendor states this is fixed in 02e4ff4941efb9bbb40d8d5b61efa1a4119b1ba7 (fixed)
Vendor states this is fixed in 0fc650fa475b50c1da8236c5e900b9460c7027bc (fixed)
Vendor states this is fixed in 352e66900cde63f3dadb142364d3c35170bbaaff (fixed)
Vendor states this is fixed in 4bbfd1b290857b9d14ea9d91562bde55ff2bc85e (fixed)
Vendor states this is fixed in 6ffa6b5bc861a3ea9dfcdc007f002b4a347c24ba (fixed)
Vendor states this is fixed in 70b0c11483d3b90b2d0f416026e475e084a77e62 (fixed)
Vendor states this is fixed in e15de80737d444ed743b1c60ced4a3a97913169b (fixed)
Vendor states this is fixed in f800f7054d2cf28b51296c7c575da27c29e3859b (fixed)
Vendor states this is fixed in 3.3 (unaffected)
Vendor states this is fixed in 5.10.245 (unaffected)
Vendor states this is fixed in 5.15.194 (unaffected)
Vendor states this is fixed in 5.4.300 (unaffected)
Vendor states this is fixed in 6.1.155 (unaffected)
Vendor states this is fixed in 6.12.50 (unaffected)
Vendor states this is fixed in 6.16.10 (unaffected)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.6.109 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card