{"id":"CVE-2025-71138","title":"drm/msm/dpu: Add missing NULL pointer check for pingpong interface","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dpu: Add missing NULL pointer check for pingpong interface\n\nIt is checked almost always in dpu_encoder_phys_wb_setup_ctl(), but in a\nsingle place the check is m…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 0d63df37b56a0aae2503147f234f5238304c62b5","Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 678d1c86566dfbb247ba25482d37fddde6140cc9","Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 471baae774a30a04cf066907b60eaf3732928cb7","Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 35ea3282136a630a3fd92b76f5a3a02651145ef1","Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 88733a0b64872357e5ecd82b7488121503cb9cc6","Linux 5.19"],"published":"2026-01-14","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:23:28.092Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-71138","references":[{"url":"https://git.kernel.org/stable/c/0d63df37b56a0aae2503147f234f5238304c62b5"},{"url":"https://git.kernel.org/stable/c/678d1c86566dfbb247ba25482d37fddde6140cc9"},{"url":"https://git.kernel.org/stable/c/471baae774a30a04cf066907b60eaf3732928cb7"},{"url":"https://git.kernel.org/stable/c/35ea3282136a630a3fd92b76f5a3a02651145ef1"},{"url":"https://git.kernel.org/stable/c/88733a0b64872357e5ecd82b7488121503cb9cc6"}],"tags":["cve.org"],"epss":0.00136,"epssPercentile":0.03077,"ingestedAt":"2026-11-05T15:02:32.175Z","slug":"CVE-2025-71138","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dpu: Add missing NULL pointer check for pingpong interface\n\nIt is checked almost always in dpu_encoder_phys_wb_setup_ctl(), but in a\nsingle place the check is missing.\nAlso use convenient locals instead of phys_enc->* where available.\n\nPatchwork: https://patchwork.freedesktop.org/patch/693860/\n\n## Affected\n\n- `Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 0d63df37b56a0aae2503147f234f5238304c62b5`\n- `Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 678d1c86566dfbb247ba25482d37fddde6140cc9`\n- `Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 471baae774a30a04cf066907b60eaf3732928cb7`\n- `Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 35ea3282136a630a3fd92b76f5a3a02651145ef1`\n- `Linux >= d7d0e73f7de33a2b9998b607707a3e944ef3b86d < 88733a0b64872357e5ecd82b7488121503cb9cc6`\n- `Linux 5.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}