Race Condition in Linux Kernel's DRM v3d Component Affecting Raspberry Pi Products
CVE-2025-21688
Currently unrated
Summary
A race condition exists in the DRM v3d component of the Linux kernel, where the job pointer is assigned NULL post-job completion. This can lead to a NULL pointer dereference if the IRQ execution thread signals the fence just as a new job starts executing, potentially causing the system to crash when the GPU interrupts. This vulnerability affects various Raspberry Pi models running the impacted Linux kernel versions.
Affected Version(s)
Linux 1bd6303d08c85072ce40ac01a767ab67195105bd < 9793206fbf5293534c3a79d78f196e2cbb48c22d
Linux a34050f70e7955a359874dff1a912a748724a140 < 1f66a3a1a516e4d545906916b3f3c8d1c5e909e6
Linux 14e0a874488e79086340ba8e2d238cb9596b68a8 < 6cfafcad46e95351c477da0ae7e3acb8f7550ada
References
Timeline
Vulnerability published
Vulnerability Reserved