CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port
drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.16.3-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.12-1Fixed in 7.2.14-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.114 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.10 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.16.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38597?
CVE-2025-38597 has been classified with a low severity due to its limited impact on system stability.
How do I fix CVE-2025-38597?
To remediate CVE-2025-38597, update the Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2025-38597?
CVE-2025-38597 affects specific configurations of the Linux kernel that utilize the DRM subsystem in video devices.
Can CVE-2025-38597 be exploited remotely?
No, CVE-2025-38597 cannot be exploited remotely as it requires local access to the affected system.
Is there any workaround for CVE-2025-38597?
There are no known workarounds for CVE-2025-38597, so applying the kernel update is the recommended approach.