Threats tagged 'ghsa-2627-h6q4-h8xq'

CVE-2025-38240 is a Linux kernel vulnerability in the MediaTek DisplayPort (dp) driver where error logging at the DRM level can cause a NULL pointer dereference. This occurs because the function mtk_dp_wait_hpd_asserted() may be called before the mtk_dp->drm_dev pointer is initialized, leading to a crash when drm_err() is used. The issue is mitigated by changing drm_err() calls to dev_err() to avoid dereferencing a NULL pointer.