Null-Pointer Dereference Vulnerability in Linux Kernel - Affects bcm_vk Component

CVE-2025-71291

What is CVE-2025-71291?

A vulnerability exists in the bcm_vk component of the Linux kernel, allowing for potential null-pointer dereferences when processing messages in the bcm_vk_read() function. If the pointer entry is NULL, the improper handling of related message structures could lead to system instability or crashes. The issue has been mitigated by enhancing the function to validate entries properly and handle messages using temporary variables, ensuring that critical information is safely accessed and preventing accidental dereferences to NULL pointers.

References