CVE-2025-38130
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38130
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38130.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-38130
- Downstream
- Published
- 2025-07-03T08:35:34Z
- Modified
- 2025-10-22T12:06:11.997626Z
- Summary
- drm/connector: only call HDMI audio helper plugged cb if non-null
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/connector: only call HDMI audio helper plugged cb if non-null
On driver remove, sound/soc/codecs/hdmi-codec.c calls the pluggedcb with NULL as the callback function and codecdev, as seen in its hdmi_remove function.
The HDMI audio helper then happily tries calling said null function pointer, and produces an Oops as a result.
Fix this by only executing the callback if fn is non-null. This means the .pluggedcb and .pluggedcb_dev members still get appropriately cleared.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedbaf616647fe6f857a0cf2187197de31e9bb17a71Fixed933f3eab1d489af8d734bff855b10d29dd5968a4
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedbaf616647fe6f857a0cf2187197de31e9bb17a71Fixedbe9b3f9a54101c19226c25ba7163d291183777a0
Affected versions
v6.*
v6.13
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.15.1
v6.15.2
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@933f3eab1d489af8d734bff855b10d29dd5968a4",
"target": {
"file": "drivers/gpu/drm/display/drm_hdmi_audio_helper.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"280712594212475424765109852703085959912",
"222615072475619987834928499642595668172",
"61405397248966126642570114627173883923",
"102722930439942499807808162311805393930"
],
"threshold": 0.9
},
"id": "CVE-2025-38130-572f8dc1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@933f3eab1d489af8d734bff855b10d29dd5968a4",
"target": {
"function": "drm_connector_hdmi_audio_hook_plugged_cb",
"file": "drivers/gpu/drm/display/drm_hdmi_audio_helper.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "134920084139168850339849638873905913191",
"length": 352.0
},
"id": "CVE-2025-38130-5a316167"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be9b3f9a54101c19226c25ba7163d291183777a0",
"target": {
"function": "drm_connector_hdmi_audio_hook_plugged_cb",
"file": "drivers/gpu/drm/display/drm_hdmi_audio_helper.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "134920084139168850339849638873905913191",
"length": 352.0
},
"id": "CVE-2025-38130-5e74ea7f"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be9b3f9a54101c19226c25ba7163d291183777a0",
"target": {
"file": "drivers/gpu/drm/display/drm_hdmi_audio_helper.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"280712594212475424765109852703085959912",
"222615072475619987834928499642595668172",
"61405397248966126642570114627173883923",
"102722930439942499807808162311805393930"
],
"threshold": 0.9
},
"id": "CVE-2025-38130-c99aeed0"
}
]