CVE-2025-40360
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-12-16

Last updated on: 2025-12-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in __drm_gem_reset_shadow_plane() can be NULL. Do not deref that pointer, but forward NULL to the other plane-reset helpers. Clears plane->state to NULL. v2: - fix typo in commit description (Javier)
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-16
Last Modified
2025-12-18
Generated
2026-06-16
AI Q&A
2025-12-16
EPSS Evaluated
2026-06-15
NVD
CVE-2025-40360
EUVD
EUVD-2025-203733
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

If exploited, this vulnerability could cause the Linux kernel to crash or behave unexpectedly due to a NULL pointer dereference in the graphics subsystem. This could lead to system instability or denial of service, affecting the availability of the system.

Executive Summary

This vulnerability involves the Linux kernel's drm/sysfb component where a NULL pointer dereference could occur during the plane reset process. Specifically, the plane state in the function __drm_gem_reset_shadow_plane() can be NULL, and dereferencing this NULL pointer could cause a crash or unexpected behavior. The fix ensures that if the plane state is NULL, it is forwarded as NULL to other plane-reset helper functions instead of being dereferenced.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-40360. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart