NULL Pointer Dereference Vulnerability in Linux Kernel User Space Graphics

CVE-2025-39807

What is CVE-2025-39807?

The Linux Kernel has a vulnerability that occurs during the handling of cursor updates after a hotplug event. This can lead to a kernel panic due to a NULL pointer dereference when accessing old_state->crtc. The introduced error handling adds necessary NULL pointer checks to maintain kernel stability and prevent the system from entering an unstable state following erroneous operations on an invalid CRTC state.

References