CVE-2025-38363

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-07-25 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegra_crtc_reset(), new memory is allocated with kzalloc(), but no check is performed. Before calling __drm_atomic_helper_crtc_reset, state should be checked to prevent possible null pointer dereference.

Weakness Classification (1)

CWE-476

Affected Software (10)

Vendor	Product	Version
Linux	Linux	b7e0b04ae450a0f2f73c376c3057fb05d798e33c < ab390ab81241cf8bf37c0a0ac2e9c6606bf3e991
Linux	Linux	b7e0b04ae450a0f2f73c376c3057fb05d798e33c < c7fc459ae6f988e0d5045a270bd600ab08bc61f1
Linux	Linux	b7e0b04ae450a0f2f73c376c3057fb05d798e33c < 99a25fc7933b88d5e16668bf6ba2d098e1754406
Linux	Linux	b7e0b04ae450a0f2f73c376c3057fb05d798e33c < 5ff3636bcc32e1cb747f6f820bcf2bb6990a7d41
Linux	Linux	b7e0b04ae450a0f2f73c376c3057fb05d798e33c < 31ac2c680a8ac11dc54a5b339a07e138bcedd924
Linux	Linux	b7e0b04ae450a0f2f73c376c3057fb05d798e33c < ac4ca634f0c9f227538711d725339293f7047b02
Linux	Linux	b7e0b04ae450a0f2f73c376c3057fb05d798e33c < 780351a5f61416ed2ba1199cc57e4a076fca644d
Linux	Linux	5.3
debian	debian_linux	11.0
linux	linux_kernel	5.3 – 5.10.240