Null Pointer Dereference in Linux Kernel's DRM Component

CVE-2025-38672

What is CVE-2025-38672?

A flaw exists in the Linux kernel's Direct Rendering Manager (DRM) component, where the dma_buf field in the drm_gem_object structure can become NULL when the user space releases the last GEM handle. This leads to a potential NULL-pointer dereference, jeopardizing system stability and security. Previous workarounds did not fully address the issue, particularly for buffer objects lacking an associated DRM framebuffer. The kernel has reverted to an earlier method to restore stability.

References