drm/sysfb: Do not dereference NULL pointer in plane reset

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2025-40360
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2025-12-16 14:15:47 UTC
Updated2026-10-14 13:10:00 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in __drm_gem_reset_shadow_plane() can be NULL. Do not deref that pointer, but forward NULL to the other plane-reset helpers. Clears plane->state to NULL. v2: - fix typo in commit description (Javier)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected b715650220311e50448cb499c71084ca8aeeeece 6abeff03cb79a2c7f4554a8e8738acd35bb37152 git Not specified
CNA Linux Linux affected b715650220311e50448cb499c71084ca8aeeeece c4faf7f417eea8b8d5cc570a1015736f307aa2d5 git Not specified
CNA Linux Linux affected b715650220311e50448cb499c71084ca8aeeeece b61ed8005bd3102510fab5015ac6a275c9c5ea16 git Not specified
CNA Linux Linux affected b715650220311e50448cb499c71084ca8aeeeece 6bdef5648a60e49d4a3b02461ab7ae3776877e77 git Not specified
CNA Linux Linux affected b715650220311e50448cb499c71084ca8aeeeece c7d5e69866bbe95c1e4ab4c10a81e0a02d9ea232 git Not specified
CNA Linux Linux affected b715650220311e50448cb499c71084ca8aeeeece 14e02ed3876f4ab0ed6d3f41972175f8b8df3d70 git Not specified
CNA Linux Linux affected 5.15 Not specified
CNA Linux Linux unaffected 5.15 semver Not specified
CNA Linux Linux unaffected 5.15.197 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.159 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.117 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.58 6.12.* semver Not specified
CNA Linux Linux unaffected 6.17.8 6.17.* semver Not specified
CNA Linux Linux unaffected 6.18 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/6bdef5648a60e49d4a3b02461ab7ae3776877e77 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/c4faf7f417eea8b8d5cc570a1015736f307aa2d5 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/b61ed8005bd3102510fab5015ac6a275c9c5ea16 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/14e02ed3876f4ab0ed6d3f41972175f8b8df3d70 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/6abeff03cb79a2c7f4554a8e8738acd35bb37152 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/c7d5e69866bbe95c1e4ab4c10a81e0a02d9ea232 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report