In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check
The function dpu_plane_virtual_atomic_check was dereferencing pointers returned by drm_atomic_get_plane_state without checking for errors. This could lead to undefined behavior if the function returns an error pointer.
This commit adds checks using IS_ERR to ensure that plane_state is valid before dereferencing them.
Similar to commit da29abe71e16 ("drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed").
Patchwork: https://patchwork.freedesktop.org/patch/643132/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1007-raspi | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub