CVE-2025-68228: drm/plane: Fix create_in_format_blob() return value
In the Linux kernel, the following vulnerability has been resolved:
drm/plane: Fix createinformatblob() return value
createinformatblob() is either supposed to return a valid pointer or an error, but never NULL. The caller will dereference the blob when it is not an error, and thus will oops if NULL returned. Return proper error values in the failure cases.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68228?
CVE-2025-68228 has been classified as having a severity level that poses significant risk due to potential dereferencing of null pointers.
How do I fix CVE-2025-68228?
To fix CVE-2025-68228, ensure that you apply the latest updates to the Linux kernel where this vulnerability has been resolved.
What software is affected by CVE-2025-68228?
CVE-2025-68228 affects the Linux kernel, specifically components related to the DRM (Direct Rendering Manager) and plane management.
What are the implications of exploiting CVE-2025-68228?
Exploiting CVE-2025-68228 could lead to crashes or undefined behavior in applications that rely on the affected functions, impacting system stability.
Is CVE-2025-68228 a remote or local vulnerability?
CVE-2025-68228 is typically considered a local vulnerability since it requires local access to the system where the vulnerable kernel is running.