Riskcovery

CVE-2025-38130

drm/connector: only call HDMI audio helper plugged cb if non-null

State
Published
Severity
Not scored
Published
Jul 3, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/connector: only call HDMI audio helper plugged cb if non-null

On driver remove, sound/soc/codecs/hdmi-codec.c calls the plugged_cb with NULL as the callback function and codec_dev, as seen in its hdmi_remove function.

The HDMI audio helper then happily tries calling said null function pointer, and produces an Oops as a result.

Fix this by only executing the callback if fn is non-null. This means the .plugged_cb and .plugged_cb_dev members still get appropriately cleared.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • baf616647fe6f857a0cf2187197de31e9bb17a71 to before 933f3eab1d489af8d734bff855b10d29dd5968a4Affected
  • baf616647fe6f857a0cf2187197de31e9bb17a71 to before be9b3f9a54101c19226c25ba7163d291183777a0Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.15.3 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.