CVE-2025-37783

MEDIUM

Linux Kernel 6.14-6.14.3 - NULL Pointer Dereference in dpu_plane_virtual_atomic_check

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check The function dpu_plane_virtual_atomic_check was dereferencing pointers returned by drm_atomic_get_plane_state without checking for errors. This could lead to undefined behavior if the function returns an error pointer. This commit adds checks using IS_ERR to ensure that plane_state is valid before dereferencing them. Similar to commit da29abe71e16 ("drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed"). Patchwork: https://patchwork.freedesktop.org/patch/643132/

Scores

CVSS v3 5.5
EPSS 0.0013
EPSS Percentile 2.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476
Status published
Products (9)
linux/Kernel 6.14.0 - 6.14.4linux
Linux/Linux < 6.14
Linux/Linux 6.14
Linux/Linux 6.14.4 - 6.14.*
Linux/Linux 6.15
Linux/Linux 774bcfb731765d092992136b54c34958d7c64bea - 5cb1b130e1cd04239cc9c26a98279f4660dce583
Linux/Linux 774bcfb731765d092992136b54c34958d7c64bea - a9670ed1cce3216778c89936d3ae91cf0d436035
linux/linux_kernel 6.15 rc1 (2 CPE variants)
linux/linux_kernel 6.14 - 6.14.4
Published May 01, 2025
Tracked Since Feb 18, 2026