CVE-2025-21697

drm/v3d: Ensure job pointer is set to NULL after job completion

State: Published
Severity: 7.8 High
Published: Feb 12, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Ensure job pointer is set to NULL after job completion

After a job completes, the corresponding pointer in the device must be set to NULL. Failing to do so triggers a warning when unloading the driver, as it appears the job is still active. To prevent this, assign the job pointer to NULL after completing the job, indicating the job has finished.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	14d1d190869685d3a1e8a3f63924e20594557cb2 to before 1bd6303d08c85072ce40ac01a767ab67195105bdAffected 14d1d190869685d3a1e8a3f63924e20594557cb2 to before a34050f70e7955a359874dff1a912a748724a140Affected 14d1d190869685d3a1e8a3f63924e20594557cb2 to before 14e0a874488e79086340ba8e2d238cb9596b68a8Affected 14d1d190869685d3a1e8a3f63924e20594557cb2 to before 2a1c88f7ca5c12dff6fa6787492ac910bb9e4407Affected 14d1d190869685d3a1e8a3f63924e20594557cb2 to before 63195bae1cbf78f1d392b1bc9ae4b03c82d0ebf3Affected 14d1d190869685d3a1e8a3f63924e20594557cb2 to before b22467b1ae104073dcb11aa78562a331cd7fb0e0Affected 14d1d190869685d3a1e8a3f63924e20594557cb2 to before e4b5ccd392b92300a2b341705cc4805681094e49Affected
LinuxLinux	4.19Affected before 4.19Not affected 5.4.290 through 5.4.Not affected 5.10.234 through 5.10.Not affected 5.15.177 through 5.15.Not affected 6.1.127 through 6.1.Not affected 6.6.74 through 6.6.Not affected 6.12.11 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

14d1d190869685d3a1e8a3f63924e20594557cb2 to before 1bd6303d08c85072ce40ac01a767ab67195105bdAffected
14d1d190869685d3a1e8a3f63924e20594557cb2 to before a34050f70e7955a359874dff1a912a748724a140Affected
14d1d190869685d3a1e8a3f63924e20594557cb2 to before 14e0a874488e79086340ba8e2d238cb9596b68a8Affected
14d1d190869685d3a1e8a3f63924e20594557cb2 to before 2a1c88f7ca5c12dff6fa6787492ac910bb9e4407Affected
14d1d190869685d3a1e8a3f63924e20594557cb2 to before 63195bae1cbf78f1d392b1bc9ae4b03c82d0ebf3Affected
14d1d190869685d3a1e8a3f63924e20594557cb2 to before b22467b1ae104073dcb11aa78562a331cd7fb0e0Affected
14d1d190869685d3a1e8a3f63924e20594557cb2 to before e4b5ccd392b92300a2b341705cc4805681094e49Affected

LinuxLinux

4.19Affected
before 4.19Not affected
5.4.290 through 5.4.*Not affected
5.10.234 through 5.10.*Not affected
5.15.177 through 5.15.*Not affected
6.1.127 through 6.1.*Not affected
6.6.74 through 6.6.*Not affected
6.12.11 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.