BaseFortify

Publication date: 2025-12-16

Last updated on: 2025-12-18

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in __drm_gem_reset_shadow_plane() can be NULL. Do not deref that pointer, but forward NULL to the other plane-reset helpers. Clears plane->state to NULL. v2: - fix typo in commit description (Javier)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-16

Last Modified

2025-12-18

Generated

2026-07-06

AI Q&A

2025-12-16

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40360

EUVD

EUVD-2025-203733

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Impact Analysis

If exploited, this vulnerability could cause the Linux kernel to crash or behave unexpectedly due to a NULL pointer dereference in the graphics subsystem. This could lead to system instability or denial of service, affecting the availability of the system.

Executive Summary

This vulnerability involves the Linux kernel's drm/sysfb component where a NULL pointer dereference could occur during the plane reset process. Specifically, the plane state in the function __drm_gem_reset_shadow_plane() can be NULL, and dereferencing this NULL pointer could cause a crash or unexpected behavior. The fix ensures that if the plane state is NULL, it is forwarded as NULL to other plane-reset helper functions instead of being dereferenced.

Hi! I’m here to help you understand CVE-2025-40360. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70