SB2025072731 - NULL pointer dereference in Linux kernel drm exynos driver
Published: July 27, 2025
Security Bulletin ID
SB2025072731
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-38467)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the decon_irq_handler() function in drivers/gpu/drm/exynos/exynos7_drm_decon.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/391e5ea5b877230b844c9bd8bbcd91b681b1ce2d
- https://git.kernel.org/stable/c/87825fbd1e176cd5b896940f3959e7c9a916945d
- https://git.kernel.org/stable/c/996740652e620ef8ee1e5c65832cf2ffa498577d
- https://git.kernel.org/stable/c/a2130463fc9451005660b0eda7b61d5f746f7d74
- https://git.kernel.org/stable/c/a40a35166f7e4f6dcd4b087d620c8228922dcb0a
- https://git.kernel.org/stable/c/b4e72c0bf878f02faa00a7dc7c9ffc4ff7c116a7
- https://git.kernel.org/stable/c/b846350aa272de99bf6fecfa6b08e64ebfb13173
- https://git.kernel.org/stable/c/e9d9b25f376737b81f06de9c5aa422b488f47184