Riskcovery

CVE-2025-68228

drm/plane: Fix create_in_format_blob() return value

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
May 11, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/plane: Fix create_in_format_blob() return value

create_in_format_blob() is either supposed to return a valid pointer or an error, but never NULL. The caller will dereference the blob when it is not an error, and thus will oops if NULL returned. Return proper error values in the failure cases.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0d6dcd741c266389bbf0a8758f537b3a171ac32a to before 860f93f4fce1e733b8a2474f6bfa153243d775f3Affected
  • 0d6dcd741c266389bbf0a8758f537b3a171ac32a to before cead55e24cf9e092890cf51c0548eccd7569defaAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.17.10 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.