CVE-2025-40073 — Linux vulnerability

15 documents6 sources
Severity
—N/A
No vector
EPSS
0.0%
top 92.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 28
Latest updateFeb 24

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Do not validate SSPP when it is not ready Current code will validate current plane and previous plane to confirm they can share a SSPP with multi-rect mode. The SSPP is already allocated for previous plane, while current plane is not associated with any SSPP yet. Null pointer is referenced when validating the SSPP of current plane. Skip SSPP validation for current plane. Unable to handle kernel NULL pointer dereferen…

Affected Packages5 packages

▶Linuxlinux/linux_kernel6.16.0 — 6.17.3
▶Debianlinux/linux_kernel< 6.17.6-1
▶Ubuntulinux/linux_kernel< 6.17.0-14.14
▶CVEListV5linux/linux3ed12a3664b362e3462cca61d41f9a9460c9e260 — f1dbb3eedb7db4cad45d2619edb1cce6041f79e3+2
▶debiandebian/linux< linux 6.17.6-1 (forky)

🔴Vulnerability Details

8
OSV
linux-azure vulnerabilities↗2026-02-24
▶
OSV
linux-oem-6.17 vulnerabilities↗2026-02-17
▶
OSV
linux-aws, linux-oracle vulnerabilities↗2026-02-17
▶
OSV
linux-gcp vulnerabilities↗2026-02-12
▶
OSV
linux, linux-raspi, linux-realtime vulnerabilities↗2026-02-12
▶

📋Vendor Advisories

6
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-02-24
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2026-02-17
▶
Ubuntu
Linux kernel (GCP) vulnerabilities↗2026-02-12
▶
Ubuntu
Linux kernel vulnerabilities↗2026-02-12
▶
Red Hat
kernel: drm/msm: Do not validate SSPP when it is not ready↗2025-10-28
▶