Null Pointer Access Issue in Linux Kernel Affects Multiple Solutions

CVE-2025-40110

What is CVE-2025-40110?

A vulnerability in the Linux kernel has been identified where the cursor snooper can attempt to access a null pointer due to unchecked resource validation. Specifically, an invalid identifier, SVGA3D_INVALID_ID, may be permitted in certain SVGA commands, leading functions that expect actual surfaces to potentially crash when dealing with null objects. The fix involves rigorous checks to ensure that resources exist before engaging the cursor snooper, enhancing system stability and security.

References