In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: megachips: Fix a null pointer dereference bug
When removing the module we will get the following warning:
[ 31.911505] i2c-core: driver [stdp2690-ge-b850v3-fw] unregistered [ 31.912484] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 31.913338] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 31.915280] RIP: 0010:drm_bridge_remove+0x97/0x130 [ 31.921825] Call Trace: [ 31.922533] stdp4028_ge_b850v3_fw_remove+0x34/0x60 [megachips_stdpxxxx_ge_b850v3_fw] [ 31.923139] i2c_device_remove+0x181/0x1f0
The two bridges (stdp2690, stdp4028) do not probe at the same time, so the driver does not call ge_b850v3_resgiter() when probing, causing the driver to try to remove the object that has not been initialized.
Fix this by checking whether both the bridges are probed.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-gcpUpgrade linux-xilinx-zynqmpUpgrade linux-nvidiaUpgrade linux-aws-fipsUpgrade linux-riscv-5.15Upgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-azureUpgrade linux-gkeUpgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-hweUpgrade linux-lowlatencyUpgrade linux-gcp-5.4Upgrade linux-azure-4.15Upgrade linux-aws-5.4Upgrade linux-ibm-5.4Upgrade linux-oracle-5.4Upgrade linux-aws-5.15Upgrade linuxUpgrade linux-iotUpgrade linux-raspiUpgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-azure-fips | Sep 19, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub