CVE-2025-40110
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-12

Last updated on: 2025-11-12

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr access in the cursor snooper Check that the resource which is converted to a surface exists before trying to use the cursor snooper on it. vmw_cmd_res_check allows explicit invalid (SVGA3D_INVALID_ID) identifiers because some svga commands accept SVGA3D_INVALID_ID to mean "no surface", unfortunately functions that accept the actual surfaces as objects might (and in case of the cursor snooper, do not) be able to handle null objects. Make sure that we validate not only the identifier (via the vmw_cmd_res_check) but also check that the actual resource exists before trying to do something with it. Fixes unchecked null-ptr reference in the snooping code.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-12
Last Modified
2025-11-12
Generated
2026-05-07
AI Q&A
2025-11-12
EPSS Evaluated
2026-05-05
NVD
CVE-2025-40110
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a null-pointer dereference in the Linux kernel's drm/vmwgfx component related to the cursor snooper. The issue occurs because the code does not properly check if a resource converted to a surface actually exists before using it. While some commands accept an invalid identifier to mean "no surface," the cursor snooper code fails to handle null objects correctly, leading to a potential null-pointer access. The fix ensures that not only the identifier is validated but also that the actual resource exists before it is used.


How can this vulnerability impact me? :

This vulnerability can cause the Linux kernel to dereference a null pointer, which may lead to a kernel crash or system instability. Such crashes can result in denial of service or unexpected behavior in systems using the affected drm/vmwgfx component.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart