Null Dereference Vulnerability in Linux Kernel Affects HDMI Teardown

CVE-2025-40011

What is CVE-2025-40011?

A vulnerability exists in the Linux kernel that can lead to a null dereference during the HDMI teardown process. Specifically, the issue arises when the function pci_set_drvdata sets pdev->driver_data to NULL. This scenario occurs before the driver attempts to dereference driver_data in the oaktrail_hdmi_i2c_exit function, resulting in a potential crash if the i2c_dev is accessed improperly. Proper sequencing of these calls is crucial to ensure system stability and prevent unexpected behavior.

References