Null Pointer Check Flaw in Linux Kernel's DPU Interface Affects Multiple Versions

CVE-2025-71138

What is CVE-2025-71138?

A vulnerability was identified in the Linux kernel concerning the Direct Rendering Manager (DRM) which specifically affects the DRV/MSM/DPU subsystem. The issue arose from a missing NULL pointer check in the pingpong interface used for DPU encoder setups. This oversight occurs predominantly in the dpu_encoder_phys_wb_setup_ctl() method, presenting a potential risk of null pointer dereferences in certain circumstances. The recommended patch rectifies this issue, ensuring more robust checking during the interface's operations.

References