CVE-2025-39807

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the drm/mediatek subsystem related to handling of the old state->crtc after a hotplug event. Specifically, a lack of error handling can lead to a kernel panic due to accessing a NULL pointer. This occurs when the cursor continues to update after a hotplug event, resulting in an attempt to operate on an invalid CRTC state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.