CVE-2025-38240: drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: dp: drmerr => deverr in HPD path to avoid NULL ptr
The function mtkdpwaithpdasserted() may be called before the mtkdp->drmdev pointer is assigned in mtkdpbridgeattach(). Specifically it can be called via this callpath: - mtkedpwaithpdasserted - [panel probe] - dpauxepprobe
Using "drm" level prints anywhere in this callpath causes a NULL pointer dereference. Change the error message directly in mtkdpwaithpdasserted() to deverr() to avoid this. Also change the error messages in mtkdpparsecapabilities(), which is called by mtkdpwaithpdasserted().
While touching these prints, also add the error code to them to make future debugging easier.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38240?
CVE-2025-38240 is considered a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-38240?
To fix CVE-2025-38240, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2025-38240?
CVE-2025-38240 affects the Linux kernel as it has a potential impact on devices utilizing this kernel.
What is the nature of CVE-2025-38240?
CVE-2025-38240 involves a null pointer dereference in the function mtk_dp_wait_hpd_asserted() in the Linux kernel's Direct Rendering Manager for MediaTek devices.
Is CVE-2025-38240 being actively exploited?
As of the last update, there is no public evidence suggesting that CVE-2025-38240 is actively being exploited in the wild.