CVE-2025-38240

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the function mtk dp wait hpd asserted(), which may be called before the mtk dp->drm dev pointer is assigned, potentially causing a NULL pointer dereference. This can occur via a specific callpath involving mtk edp wait hpd asserted, panel probe, and dp aux ep probe. The error messages in mtk dp wait hpd asserted() and mtk dp parse capabilities() have been changed to dev err() to avoid this issue. The error code has also been added to these messages to facilitate future debugging.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.