CVE-2025-38467
MEDIUMLinux Kernel - Null Pointer Dereference in DRM Exynos7 DECON IRQ Handler
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling If there's support for another console device (such as a TTY serial), the kernel occasionally panics during boot. The panic message and a relevant snippet of the call stack is as follows: Unable to handle kernel NULL pointer dereference at virtual address 000000000000000 Call trace: drm_crtc_handle_vblank+0x10/0x30 (P) decon_irq_handler+0x88/0xb4 [...] Otherwise, the panics don't happen. This indicates that it's some sort of race condition. Add a check to validate if the drm device can handle vblanks before calling drm_crtc_handle_vblank() to avoid this.
References (10)
Core 10
Core References
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
Scores
CVSS v3
5.5
EPSS
0.0007
EPSS Percentile
20.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (28)
debian/debian_linux
11.0
linux/Kernel
4.0.0 - 5.4.296linux
linux/Kernel
5.11.0 - 5.15.189linux
linux/Kernel
5.16.0 - 6.1.146linux
linux/Kernel
5.5.0 - 5.10.240linux
linux/Kernel
6.13.0 - 6.15.7linux
linux/Kernel
6.2.0 - 6.6.99linux
linux/Kernel
6.7.0 - 6.12.39linux
Linux/Linux
< 4.0
Linux/Linux
4.0
... and 18 more
Published
Jul 25, 2025
Tracked Since
Feb 18, 2026