Null Pointer Dereference in Linux Kernel's DRM Module Affecting Mediatek Devices

CVE-2025-38240

Summary

A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) module specifically affects Mediatek devices. The issue arises when the function mtk_dp_wait_hpd_asserted() is invoked before the mtk_dp->drm_dev pointer is properly initialized in the mtk_dp_bridge_attach() function. This flow can lead to a NULL pointer dereference, potentially resulting in application crashes or unexpected behavior. Modifications have been made to change error handling in both mtk_dp_wait_hpd_asserted() and mtk_dp_parse_capabilities() functions. These changes improve the robustness of error messaging and enhance future debugging efforts by including error codes.

References