NULL Pointer Dereference Vulnerability in Linux Kernel Affecting DRM Components

CVE-2025-38673

What is CVE-2025-38673?

A vulnerability in the Linux kernel involves a NULL pointer dereference caused by the instability of the dma_buf field in the drm_gem_object struct. This issue arises when a user space releases the final GEM handle on the buffer object, leading to a NULL-pointer deref and potential system instability. Although previous workarounds attempted to address the problem, they were only partially effective, particularly affecting buffer objects without an associated DRM framebuffer.

References