CVE-2025-40011

drm/gma500: Fix null dereference in hdmi teardown

State: Published
Severity: Not scored
Published: Oct 20, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/gma500: Fix null dereference in hdmi teardown

pci_set_drvdata sets the value of pdev->driver_data to NULL, after which the driver_data obtained from the same dev is dereferenced in oaktrail_hdmi_i2c_exit, and the i2c_dev is extracted from it. To prevent this, swap these calls.

Found by Linux Verification Center (linuxtesting.org) with Svacer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1b082ccf5901108d3acd860a73d8c0442556c0bb to before 70b0c11483d3b90b2d0f416026e475e084a77e62Affected 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 4bbfd1b290857b9d14ea9d91562bde55ff2bc85eAffected 1b082ccf5901108d3acd860a73d8c0442556c0bb to before e15de80737d444ed743b1c60ced4a3a97913169bAffected 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 02e4ff4941efb9bbb40d8d5b61efa1a4119b1ba7Affected 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 6ffa6b5bc861a3ea9dfcdc007f002b4a347c24baAffected 1b082ccf5901108d3acd860a73d8c0442556c0bb to before f800f7054d2cf28b51296c7c575da27c29e3859bAffected 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 0fc650fa475b50c1da8236c5e900b9460c7027bcAffected 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 352e66900cde63f3dadb142364d3c35170bbaaffAffected
LinuxLinux	3.3Affected before 3.3Not affected 5.4.300 through 5.4.Not affected 5.10.245 through 5.10.Not affected 5.15.194 through 5.15.Not affected 6.1.155 through 6.1.Not affected 6.6.109 through 6.6.Not affected 6.12.50 through 6.12.Not affected 6.16.10 through 6.16.*Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

1b082ccf5901108d3acd860a73d8c0442556c0bb to before 70b0c11483d3b90b2d0f416026e475e084a77e62Affected
1b082ccf5901108d3acd860a73d8c0442556c0bb to before 4bbfd1b290857b9d14ea9d91562bde55ff2bc85eAffected
1b082ccf5901108d3acd860a73d8c0442556c0bb to before e15de80737d444ed743b1c60ced4a3a97913169bAffected
1b082ccf5901108d3acd860a73d8c0442556c0bb to before 02e4ff4941efb9bbb40d8d5b61efa1a4119b1ba7Affected
1b082ccf5901108d3acd860a73d8c0442556c0bb to before 6ffa6b5bc861a3ea9dfcdc007f002b4a347c24baAffected
1b082ccf5901108d3acd860a73d8c0442556c0bb to before f800f7054d2cf28b51296c7c575da27c29e3859bAffected
1b082ccf5901108d3acd860a73d8c0442556c0bb to before 0fc650fa475b50c1da8236c5e900b9460c7027bcAffected
1b082ccf5901108d3acd860a73d8c0442556c0bb to before 352e66900cde63f3dadb142364d3c35170bbaaffAffected

LinuxLinux

3.3Affected
before 3.3Not affected
5.4.300 through 5.4.*Not affected
5.10.245 through 5.10.*Not affected
5.15.194 through 5.15.*Not affected
6.1.155 through 6.1.*Not affected
6.6.109 through 6.6.*Not affected
6.12.50 through 6.12.*Not affected
6.16.10 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.