CVE-2025-40011
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix null dereference in hdmi teardown pci_set_drvdata sets the value of pdev->driver_data to NULL, after which the driver_data obtained from the same dev is dereferenced in oaktrail_hdmi_i2c_exit, and the i2c_dev is extracted from it. To prevent this, swap these calls. Found by Linux Verification Center (linuxtesting.org) with Svacer.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Deferred
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2025-10-20 16:15:37.813000
Last modified
2026-10-19 21:10:00.160000
View original CVE JSON
{
"id": "CVE-2025-40011",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-10-20T16:15:37.813",
"lastModified": "2026-10-19T21:10:00.160",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500: Fix null dereference in hdmi teardown\n\npci_set_drvdata sets the value of pdev->driver_data to NULL,\nafter which the driver_data obtained from the same dev is\ndereferenced in oaktrail_hdmi_i2c_exit, and the i2c_dev is\nextracted from it. To prevent this, swap these calls.\n\nFound by Linux Verification Center (linuxtesting.org) with Svacer."
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/gma500: Corrección de desreferencia nula en el desmontaje de hdmi\n\npci_set_drvdata establece el valor de pdev->driver_data a NULL, después de lo cual el driver_data obtenido del mismo dev es desreferenciado en oaktrail_hdmi_i2c_exit, y el i2c_dev es extraído de él. Para prevenir esto, intercambiar estas llamadas.\n\nEncontrado por Linux Verification Center (linuxtesting.org) con Svacer."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/gpu/drm/gma500/oaktrail_hdmi.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "1b082ccf5901108d3acd860a73d8c0442556c0bb",
"lessThan": "70b0c11483d3b90b2d0f416026e475e084a77e62",
"versionType": "git",
"status": "affected"
},
{
"version": "1b082ccf5901108d3acd860a73d8c0442556c0bb",
"lessThan": "4bbfd1b290857b9d14ea9d91562bde55ff2bc85e",
"versionType": "git",
"status": "affected"
},
{
"version": "1b082ccf5901108d3acd860a73d8c0442556c0bb",
"lessThan": "e15de80737d444ed743b1c60ced4a3a97913169b",
"versionType": "git",
"status": "affected"
},
{
"version": "1b082ccf5901108d3acd860a73d8c0442556c0bb",
"lessThan": "02e4ff4941efb9bbb40d8d5b61efa1a4119b1ba7",
"versionType": "git",
"status": "affected"
},
{
"version": "1b082ccf5901108d3acd860a73d8c0442556c0bb",
"lessThan": "6ffa6b5bc861a3ea9dfcdc007f002b4a347c24ba",
"versionType": "git",
"status": "affected"
},
{
"version": "1b082ccf5901108d3acd860a73d8c0442556c0bb",
"lessThan": "f800f7054d2cf28b51296c7c575da27c29e3859b",
"versionType": "git",
"status": "affected"
},
{
"version": "1b082ccf5901108d3acd860a73d8c0442556c0bb",
"lessThan": "0fc650fa475b50c1da8236c5e900b9460c7027bc",
"versionType": "git",
"status": "affected"
},
{
"version": "1b082ccf5901108d3acd860a73d8c0442556c0bb",
"lessThan": "352e66900cde63f3dadb142364d3c35170bbaaff",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/gpu/drm/gma500/oaktrail_hdmi.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3.3",
"status": "affected"
},
{
"version": "0",
"lessThan": "3.3",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.4.300",
"lessThanOrEqual": "5.4.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.245",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.194",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.155",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.109",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.50",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.16.10",
"lessThanOrEqual": "6.16.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.17",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/02e4ff4941efb9bbb40d8d5b61efa1a4119b1ba7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/0fc650fa475b50c1da8236c5e900b9460c7027bc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/352e66900cde63f3dadb142364d3c35170bbaaff",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/4bbfd1b290857b9d14ea9d91562bde55ff2bc85e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6ffa6b5bc861a3ea9dfcdc007f002b4a347c24ba",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/70b0c11483d3b90b2d0f416026e475e084a77e62",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e15de80737d444ed743b1c60ced4a3a97913169b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f800f7054d2cf28b51296c7c575da27c29e3859b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}