NULL Pointer Dereference Vulnerability in Raspberry Pi 4 Linux Kernel

CVE-2025-38189

What is CVE-2025-38189?

A vulnerability exists in the Linux kernel affecting Raspberry Pi 4 where a NULL pointer dereference occurs in the v3d_job_update_stats function. This issue arises when a file descriptor is closed before the GPU jobs it submitted have finished, leading to potential kernel panics or system instability due to attempts to access freed memory structures. It is crucial for users to ensure that file descriptors remain valid during job execution to prevent these critical failures.

References