CVE-2025-40360
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-12-16

Last updated on: 2025-12-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in __drm_gem_reset_shadow_plane() can be NULL. Do not deref that pointer, but forward NULL to the other plane-reset helpers. Clears plane->state to NULL. v2: - fix typo in commit description (Javier)
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-16
Last Modified
2025-12-18
Generated
2026-05-27
AI Q&A
2025-12-16
EPSS Evaluated
2026-05-26
NVD
CVE-2025-40360
EUVD
EUVD-2025-203733
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :

If exploited, this vulnerability could cause the Linux kernel to crash or behave unexpectedly due to a NULL pointer dereference in the graphics subsystem. This could lead to system instability or denial of service, affecting the availability of the system.


Can you explain this vulnerability to me?

This vulnerability involves the Linux kernel's drm/sysfb component where a NULL pointer dereference could occur during the plane reset process. Specifically, the plane state in the function __drm_gem_reset_shadow_plane() can be NULL, and dereferencing this NULL pointer could cause a crash or unexpected behavior. The fix ensures that if the plane state is NULL, it is forwarded as NULL to other plane-reset helper functions instead of being dereferenced.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart