CVE-2025-38130: drm/connector: only call HDMI audio helper plugged cb if non-null
In the Linux kernel, the following vulnerability has been resolved:
drm/connector: only call HDMI audio helper plugged cb if non-null
On driver remove, sound/soc/codecs/hdmi-codec.c calls the pluggedcb with NULL as the callback function and codecdev, as seen in its hdmiremove function.
The HDMI audio helper then happily tries calling said null function pointer, and produces an Oops as a result.
Fix this by only executing the callback if fn is non-null. This means the .pluggedcb and .pluggedcbdev members still get appropriately cleared.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In hdmi_remove, call the HDMI audio helper plugged callback only when the callback function pointer is non-null.
sound/soc/codecs/hdmi-codec.c plugged_cb callback invocation = only execute if fn is non-null
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38130?
CVE-2025-38130 has been classified with a low severity level due to its limited impact on the Linux kernel's functionality.
How does CVE-2025-38130 affect the Linux Kernel?
CVE-2025-38130 affects the HDMI audio functionality by improperly handling callbacks on driver removal.
How do I fix CVE-2025-38130?
To resolve CVE-2025-38130, update the Linux kernel to the latest version that includes the patch for this vulnerability.
What versions of the Linux Kernel are affected by CVE-2025-38130?
CVE-2025-38130 may affect multiple versions of the Linux Kernel depending on the implementation of HDMI audio functionality.
Is CVE-2025-38130 actively exploited in the wild?
As of now, there are no reported instances of CVE-2025-38130 being actively exploited in the wild.