CVE-2025-71083: drm/ttm: Avoid NULL pointer deref for evicted BOs

Q: Who can trigger this issue?

The CVSS vector indicates local access and low privileges are required, with no user interaction. The issue occurs when devcoredump reads buffer objects, including buffer objects that have been evicted and no longer have an associated resource.

Q: What is the impact of successful exploitation?

Successful triggering can cause a null pointer dereference and affect availability. The provided severity vector indicates no confidentiality or integrity impact.

Q: How can I mitigate the issue if I cannot patch immediately?

No workaround or configuration mitigation is provided. Applying the available patch is the documented remediation.

Q: How can I tell whether a crash is related to this vulnerability?

The relevant condition is a devcoredump attempting to read an evicted buffer object that lacks an associated resource. The fixed behavior records ENODATA for that buffer object rather than attempting to dump its contents.

Published Jan 13, 2026

Updated

drm/ttm: Avoid NULL pointer deref for evicted BOs

Affected Software

15 affected componentsFixes available

Microsoft azl3 kernel 6.6.119.3-3

Patch available

Linux Linux kernel>=4.14.1<5.15.198

Linux Linux kernel>=5.16<6.1.160

Linux Linux kernel>=6.2<6.6.120

Linux Linux kernel>=6.7<6.12.64

Linux Linux kernel>=6.13<6.18.4

Linux Linux kernel=4.14

Linux Linux kernel=6.19-rc1

Linux Linux kernel=6.19-rc2

Linux Linux kernel=6.19-rc3

Linux Linux kernel=6.19-rc4

Linux Linux kernel=6.19-rc5

Linux Linux kernel=6.19-rc6

Linux Linux kernel=6.19-rc7

Linux Linux kernel=6.19-rc8

Remediation

Event History

Jan 13, 2026

CVE Published

via MITRE·03:34 PM

Data Sourced

via MITRE·03:34 PM

Description

Data Sourced

via NVD·04:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jan 15, 2026

Data Sourced

via Microsoft·09:03 AM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·09:03 AM

Affected Software

Updated

via Microsoft·09:03 AM

DescriptionSeverity

Frequently Asked Questions

Who can trigger this issue?

The CVSS vector indicates local access and low privileges are required, with no user interaction. The issue occurs when devcoredump reads buffer objects, including buffer objects that have been evicted and no longer have an associated resource.

What is the impact of successful exploitation?

Successful triggering can cause a null pointer dereference and affect availability. The provided severity vector indicates no confidentiality or integrity impact.

How can I mitigate the issue if I cannot patch immediately?

No workaround or configuration mitigation is provided. Applying the available patch is the documented remediation.

How can I tell whether a crash is related to this vulnerability?

The relevant condition is a devcoredump attempting to read an evicted buffer object that lacks an associated resource. The fixed behavior records ENODATA for that buffer object rather than attempting to dump its contents.

CVE-2025-71083: drm/ttm: Avoid NULL pointer deref for evicted BOs

Affected Software

Remediation

Patch Available

Patch Available

Patch Available

Patch Available

Patch Available

Patch Available

Event History

Frequently Asked Questions

Who can trigger this issue?

What is the impact of successful exploitation?

How can I mitigate the issue if I cannot patch immediately?

How can I tell whether a crash is related to this vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Who can trigger this issue?

What is the impact of successful exploitation?

How can I mitigate the issue if I cannot patch immediately?

How can I tell whether a crash is related to this vulnerability?