Critical NULL Pointer Dereference in Linux Kernel - Affects Debian Linux Packages
Summary
CVE-2025-38319: In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table The function atomctrl_initialize_mc_reg_table() and atomctrl_init... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system, ensuring efficient operation and security. The kernel is continuously updated to address vulnerabilities and improve performance. This specific vulnerability affects the AMD graphics driver within the kernel, which is crucial for systems utilizing AMD hardware.
Vulnerability Detail
The vulnerability identified as CVE-2025-38319 arises from a NULL pointer dereference in the functions atomctrl_initialize_mc_reg_table() and atomctrl_initialize_mc_reg_table_v2_2(). These functions fail to validate the return value of smu_atom_get_data_table(). If this function does not successfully retrieve the vram_info, it returns NULL, which is subsequently dereferenced, potentially leading to system crashes or security breaches.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate risks.
Conclusion
CVE-2025-38319 is a significant vulnerability in the Linux kernel that can lead to serious system issues if not addressed. Users are urged to update their systems to the patched version to ensure continued security and stability. Regular monitoring and updates are essential to safeguard against such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38319 is a vulnerability in the Linux kernel that can lead to a NULL pointer dereference, potentially causing system crashes.
Debian 11, 12, and 13 are affected by this vulnerability, with specific patches available for each version.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without signup.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to avoid potential security risks.
It is advisable to check for updates regularly, ideally weekly, to ensure your system is protected against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
