CVE-2025-71103

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-71103
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71103.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-71103
Downstream
Published
2026-01-14T15:05:53.116Z
Modified
2026-01-14T22:37:31.535354Z
Summary
drm/msm: adreno: fix deferencing ifpc_reglist when not declared
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: adreno: fix deferencing ifpc_reglist when not declared

On plaforms with an a7xx GPU not supporting IFPC, the ifpcreglist if still deferenced in a7xxpatchpwrupreglist() which causes a kernel crash: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 ... pc : a6xxhwinit+0x155c/0x1e4c [msm] lr : a6xxhwinit+0x9a8/0x1e4c [msm] ... Call trace: a6xxhwinit+0x155c/0x1e4c [msm] (P) msmgpuhwinit+0x58/0x88 [msm] adrenoloadgpu+0x94/0x1fc [msm] msmopen+0xe4/0xf4 [msm] drmfilealloc+0x1a0/0x2e4 [drm] drmclientinit+0x7c/0x104 [drm] drmfbdevclientsetup+0x94/0xcf0 [drmclientlib] drmclientsetup+0xb4/0xd8 [drmclientlib] msmdrmkmspostinit+0x2c/0x3c [msm] msmdrminit+0x1a4/0x228 [msm] msmdrm_bind+0x30/0x3c [msm] ...

Check the validity of ifpc_reglist before deferencing the table to setup the register values.

Patchwork: https://patchwork.freedesktop.org/patch/688944/

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71103.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a6a0157cc68ec561392fc81f603b5b9de1a20e4e
Fixed
19648135e904bce447d368ecb6136e5da809639c
Fixed
129049d4fe22c998ae9fd1ec479fbb4ed5338c15

Affected versions

v6.*

v6.16
v6.16-rc3
v6.16-rc4
v6.16-rc5
v6.16-rc6
v6.16-rc7
v6.17
v6.17-rc1
v6.17-rc2
v6.17-rc3
v6.17-rc4
v6.17-rc5
v6.17-rc6
v6.17-rc7
v6.18
v6.18-rc1
v6.18-rc2
v6.18-rc3
v6.18-rc4
v6.18-rc5
v6.18-rc6
v6.18-rc7
v6.18.1
v6.18.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71103.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71103.json"