CVE-2025-38363

drm/tegra: Fix a possible null pointer dereference

Description

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegra_crtc_reset(), new memory is allocated with kzalloc(), but no check is performed. Before calling __drm_atomic_helper_crtc_reset, state should be checked to prevent possible null pointer dereference.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/ab390ab81241cf8bf37c0a0ac2e9c6606bf3e991
https://git.kernel.org/stable/c/c7fc459ae6f988e0d5045a270bd600ab08bc61f1
https://git.kernel.org/stable/c/99a25fc7933b88d5e16668bf6ba2d098e1754406
https://git.kernel.org/stable/c/5ff3636bcc32e1cb747f6f820bcf2bb6990a7d41
https://git.kernel.org/stable/c/31ac2c680a8ac11dc54a5b339a07e138bcedd924
https://git.kernel.org/stable/c/ac4ca634f0c9f227538711d725339293f7047b02
https://git.kernel.org/stable/c/780351a5f61416ed2ba1199cc57e4a076fca644d

Frequently Asked Questions

What is the severity of CVE-2025-38363?: CVE-2025-38363 has not yet been assigned a CVSS score.
How to fix CVE-2025-38363?: To fix CVE-2025-38363, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-38363 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-38363 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-38363?: CVE-2025-38363 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.