In the Linux kernel, the following vulnerability has been resolved:
drm/exynos: exynos7drmdecon: add vblank check in IRQ handling
If there's support for another console device (such as a TTY serial), the kernel occasionally panics during boot. The panic message and a relevant snippet of the call stack is as follows:
Unable to handle kernel NULL pointer dereference at virtual address 000000000000000 Call trace: drmcrtchandlevblank+0x10/0x30 (P) deconirq_handler+0x88/0xb4 [...]
Otherwise, the panics don't happen. This indicates that it's some sort of race condition.
Add a check to validate if the drm device can handle vblanks before calling drmcrtchandle_vblank() to avoid this.
[ { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391e5ea5b877230b844c9bd8bbcd91b681b1ce2d", "signature_version": "v1", "target": { "function": "decon_irq_handler", "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "function_hash": "46260849047745726566108556431004276765", "length": 546.0 }, "id": "CVE-2025-38467-0825c3dd" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87825fbd1e176cd5b896940f3959e7c9a916945d", "signature_version": "v1", "target": { "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "160580795325527221595727456475928350032", "317714097049944496434795694412841438197", "35116274777970673486942457993405792294" ] }, "id": "CVE-2025-38467-0d0fca8a" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4e72c0bf878f02faa00a7dc7c9ffc4ff7c116a7", "signature_version": "v1", "target": { "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "160580795325527221595727456475928350032", "317714097049944496434795694412841438197", "35116274777970673486942457993405792294" ] }, "id": "CVE-2025-38467-1b6a080a" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9d9b25f376737b81f06de9c5aa422b488f47184", "signature_version": "v1", "target": { "function": "decon_irq_handler", "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "function_hash": "46260849047745726566108556431004276765", "length": 546.0 }, "id": "CVE-2025-38467-2cb75ee6" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9d9b25f376737b81f06de9c5aa422b488f47184", "signature_version": "v1", "target": { "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "160580795325527221595727456475928350032", "317714097049944496434795694412841438197", "35116274777970673486942457993405792294" ] }, "id": "CVE-2025-38467-328132b0" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4e72c0bf878f02faa00a7dc7c9ffc4ff7c116a7", "signature_version": "v1", "target": { "function": "decon_irq_handler", "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "function_hash": "46260849047745726566108556431004276765", "length": 546.0 }, "id": "CVE-2025-38467-3ffad3d9" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b846350aa272de99bf6fecfa6b08e64ebfb13173", "signature_version": "v1", "target": { "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "160580795325527221595727456475928350032", "317714097049944496434795694412841438197", "35116274777970673486942457993405792294" ] }, "id": "CVE-2025-38467-60a6355a" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@996740652e620ef8ee1e5c65832cf2ffa498577d", "signature_version": "v1", "target": { "function": "decon_irq_handler", "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "function_hash": "46260849047745726566108556431004276765", "length": 546.0 }, "id": "CVE-2025-38467-65cb30c4" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b846350aa272de99bf6fecfa6b08e64ebfb13173", "signature_version": "v1", "target": { "function": "decon_irq_handler", "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "function_hash": "46260849047745726566108556431004276765", "length": 546.0 }, "id": "CVE-2025-38467-82962029" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2130463fc9451005660b0eda7b61d5f746f7d74", "signature_version": "v1", "target": { "function": "decon_irq_handler", "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "function_hash": "46260849047745726566108556431004276765", "length": 546.0 }, "id": "CVE-2025-38467-965ef804" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a40a35166f7e4f6dcd4b087d620c8228922dcb0a", "signature_version": "v1", "target": { "function": "decon_irq_handler", "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "function_hash": "46260849047745726566108556431004276765", "length": 546.0 }, "id": "CVE-2025-38467-a184131c" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a40a35166f7e4f6dcd4b087d620c8228922dcb0a", "signature_version": "v1", "target": { "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "160580795325527221595727456475928350032", "317714097049944496434795694412841438197", "35116274777970673486942457993405792294" ] }, "id": "CVE-2025-38467-c4bb8e29" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391e5ea5b877230b844c9bd8bbcd91b681b1ce2d", "signature_version": "v1", "target": { "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "160580795325527221595727456475928350032", "317714097049944496434795694412841438197", "35116274777970673486942457993405792294" ] }, "id": "CVE-2025-38467-cbbeee65" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87825fbd1e176cd5b896940f3959e7c9a916945d", "signature_version": "v1", "target": { "function": "decon_irq_handler", "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "function_hash": "46260849047745726566108556431004276765", "length": 546.0 }, "id": "CVE-2025-38467-d46bef11" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@996740652e620ef8ee1e5c65832cf2ffa498577d", "signature_version": "v1", "target": { "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "160580795325527221595727456475928350032", "317714097049944496434795694412841438197", "35116274777970673486942457993405792294" ] }, "id": "CVE-2025-38467-dceae96b" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2130463fc9451005660b0eda7b61d5f746f7d74", "signature_version": "v1", "target": { "file": "drivers/gpu/drm/exynos/exynos7_drm_decon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "160580795325527221595727456475928350032", "317714097049944496434795694412841438197", "35116274777970673486942457993405792294" ] }, "id": "CVE-2025-38467-f5f471b3" } ]