---
id: CVE-2025-38363
title: 'drm/tegra: Fix a possible null pointer dereference'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/tegra: Fix a possible null pointer dereference

  In tegra_crtc_reset(), new memory is allocated with kzalloc(), but
  no check is performed. Before calling __drm_atomi…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c <
    ab390ab81241cf8bf37c0a0ac2e9c6606bf3e991
  - >-
    Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c <
    c7fc459ae6f988e0d5045a270bd600ab08bc61f1
  - >-
    Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c <
    99a25fc7933b88d5e16668bf6ba2d098e1754406
  - >-
    Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c <
    5ff3636bcc32e1cb747f6f820bcf2bb6990a7d41
  - >-
    Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c <
    31ac2c680a8ac11dc54a5b339a07e138bcedd924
  - >-
    Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c <
    ac4ca634f0c9f227538711d725339293f7047b02
  - >-
    Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c <
    780351a5f61416ed2ba1199cc57e4a076fca644d
  - Linux 5.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:55:30.470443Z'
published: '2025-07-25'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:02:35.486Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38363'
references:
  - url: 'https://git.kernel.org/stable/c/ab390ab81241cf8bf37c0a0ac2e9c6606bf3e991'
  - url: 'https://git.kernel.org/stable/c/c7fc459ae6f988e0d5045a270bd600ab08bc61f1'
  - url: 'https://git.kernel.org/stable/c/99a25fc7933b88d5e16668bf6ba2d098e1754406'
  - url: 'https://git.kernel.org/stable/c/5ff3636bcc32e1cb747f6f820bcf2bb6990a7d41'
  - url: 'https://git.kernel.org/stable/c/31ac2c680a8ac11dc54a5b339a07e138bcedd924'
  - url: 'https://git.kernel.org/stable/c/ac4ca634f0c9f227538711d725339293f7047b02'
  - url: 'https://git.kernel.org/stable/c/780351a5f61416ed2ba1199cc57e4a076fca644d'
tags:
  - cve.org
epss: 0.00203
epssPercentile: 0.10303
ingestedAt: '2026-11-05T22:38:31.962Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: Fix a possible null pointer dereference

In tegra_crtc_reset(), new memory is allocated with kzalloc(), but
no check is performed. Before calling __drm_atomic_helper_crtc_reset,
state should be checked to prevent possible null pointer dereference.

## Affected

- `Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c < ab390ab81241cf8bf37c0a0ac2e9c6606bf3e991`
- `Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c < c7fc459ae6f988e0d5045a270bd600ab08bc61f1`
- `Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c < 99a25fc7933b88d5e16668bf6ba2d098e1754406`
- `Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c < 5ff3636bcc32e1cb747f6f820bcf2bb6990a7d41`
- `Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c < 31ac2c680a8ac11dc54a5b339a07e138bcedd924`
- `Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c < ac4ca634f0c9f227538711d725339293f7047b02`
- `Linux >= b7e0b04ae450a0f2f73c376c3057fb05d798e33c < 780351a5f61416ed2ba1199cc57e4a076fca644d`
- `Linux 5.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.