CVE-2025-38130
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38130
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38130.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38130
- Downstream
- Published
- 2025-07-03T08:35:34.385Z
- Modified
- 2025-11-28T02:34:24.249982Z
- Summary
- drm/connector: only call HDMI audio helper plugged cb if non-null
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/connector: only call HDMI audio helper plugged cb if non-null
On driver remove, sound/soc/codecs/hdmi-codec.c calls the pluggedcb with NULL as the callback function and codecdev, as seen in its hdmi_remove function.
The HDMI audio helper then happily tries calling said null function pointer, and produces an Oops as a result.
Fix this by only executing the callback if fn is non-null. This means the .pluggedcb and .pluggedcb_dev members still get appropriately cleared.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38130.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/933f3eab1d489af8d734bff855b10d29dd5968a4
- https://git.kernel.org/stable/c/be9b3f9a54101c19226c25ba7163d291183777a0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38130.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-38130