CVE-2025-38363

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: Fix a possible null pointer dereference

In tegra_crtc_reset(), new memory is allocated with kzalloc(), but no check is performed. Before calling __drm_atomic_helper_crtc_reset, state should be checked to prevent possible null pointer dereference.

A NULL pointer dereference vulnerability was identified in the Tegra DRM subsystem. In tegra_crtc_reset(), the newly allocated state structure was not checked before being passed to __drm_atomic_helper_crtc_reset(), which could lead to a crash if allocation failed.

The kernel panic could happen, especially under memory pressure scenarios where kzalloc() can return NULL.

The affected function tegra_crtc_reset() is part of the DRM Tegra kernel driver and is only invoked within privileged kernel contexts, such as during device initialization or reset paths. Since this code path cannot be directly reached by unprivileged userspace without prior kernel-level execution, the Privileges Required metric is set to High.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.