CVE-2025-38597

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw within the DRM/rockchip subsystem, specifically related to vop2 handling. The code does not verify the existence of a primary plane after iterating through available windows, potentially leading to a null-pointer dereference if a usable primary window is not found – as observed on the rk3576 vp2 when vp0 is in use. This issue occurs during the binding of a vop2 and can cause probing to fail.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.