CVE-2025-21697

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Ensure job pointer is set to NULL after job completion

After a job completes, the corresponding pointer in the device must be set to NULL. Failing to do so triggers a warning when unloading the driver, as it appears the job is still active. To prevent this, assign the job pointer to NULL after completing the job, indicating the job has finished.

This vulnerability is rated as Moderate severity because exploitation requires local access and specialized hardware, resulting primarily in kernel warnings or denial of service upon driver teardown rather than privilege escalation or data exposure. Red Hat Enterprise Linux configurations typically do not enable or ship this Broadcom VideoCore graphics module, significantly limiting exposure in standard enterprise deployments. Furthermore, triggering the condition depends on active GPU job submission prior to module unloading.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.