{
  "cveId": "CVE-2025-38189",
  "url": "https://patchblox.com/security/cve/CVE-2025-38189",
  "summary": "CVE-2025-38189 is fixed in 18 products on 1 platform, first by DEBIAN-CVE-2025-38189, released July 4, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "drm/v3d: Avoid NULL pointer dereference in \u0060v3d_job_update_stats()\u0060",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/v3d: Avoid NULL pointer dereference in \u0060v3d_job_update_stats()\u0060  The following kernel Oops was recently reported by Mesa CI:  [  800.139824] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000588 [  800.148619] Mem abort info: [  800.151402]   ESR = 0x0000000096000005 [  800.155141]   EC = 0x25: DABT (current EL), IL = 32 bits [  800.160444]   SET = 0, FnV = 0 [  800.163488]   EA = 0, S1PTW = 0 [  800.166619]   FSC = 0x05: level 1 translation fault [  800.171487] Data abort info: [  800.174357]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [  800.179832]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [  800.184873]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [  800.190176] user pgtable: 4k pages, 39-bit VAs, pgdp=00000001014c2000 [  800.196607] [0000000000000588] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000 [  800.205305] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [  800.211564] Modules linked in: vc4 snd_soc_hdmi_codec drm_display_helper v3d cec gpu_sched drm_dma_helper drm_shmem_helper drm_kms_helper drm drm_panel_orientation_quirks snd_soc_core snd_compress snd_pcm_dmaengine snd_pcm i2c_brcmstb snd_timer snd backlight [  800.234448] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.25\u002Brpt-rpi-v8 #1  Debian 1:6.12.25-1\u002Brpt1 [  800.244182] Hardware name: Raspberry Pi 4 Model B Rev 1.4 (DT) [  800.250005] pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [  800.256959] pc : v3d_job_update_stats\u002B0x60/0x130 [v3d] [  800.262112] lr : v3d_job_update_stats\u002B0x48/0x130 [v3d] [  800.267251] sp : ffffffc080003e60 [  800.270555] x29: ffffffc080003e60 x28: ffffffd842784980 x27: 0224012000000000 [  800.277687] x26: ffffffd84277f630 x25: ffffff81012fd800 x24: 0000000000000020 [  800.284818] x23: ffffff8040238b08 x22: 0000000000000570 x21: 0000000000000158 [  800.291948] x20: 0000000000000000 x19: ffffff8040238000 x18: 0000000000000000 [  800.299078] x17: ffffffa8c1bd2000 x16: ffffffc080000000 x15: 0000000000000000 [  800.306208] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [  800.313338] x11: 0000000000000040 x10: 0000000000001a40 x9 : ffffffd83b39757c [  800.320468] x8 : ffffffd842786420 x7 : 7fffffffffffffff x6 : 0000000000ef32b0 [  800.327598] x5 : 00ffffffffffffff x4 : 0000000000000015 x3 : ffffffd842784980 [  800.334728] x2 : 0000000000000004 x1 : 0000000000010002 x0 : 000000ba4c0ca382 [  800.341859] Call trace: [  800.344294]  v3d_job_update_stats\u002B0x60/0x130 [v3d] [  800.349086]  v3d_irq\u002B0x124/0x2e0 [v3d] [  800.352835]  __handle_irq_event_percpu\u002B0x58/0x218 [  800.357539]  handle_irq_event\u002B0x54/0xb8 [  800.361369]  handle_fasteoi_irq\u002B0xac/0x240 [  800.365458]  handle_irq_desc\u002B0x48/0x68 [  800.369200]  generic_handle_domain_irq\u002B0x24/0x38 [  800.373810]  gic_handle_irq\u002B0x48/0xd8 [  800.377464]  call_on_irq_stack\u002B0x24/0x58 [  800.381379]  do_interrupt_handler\u002B0x88/0x98 [  800.385554]  el1_interrupt\u002B0x34/0x68 [  800.389123]  el1h_64_irq_handler\u002B0x18/0x28 [  800.393211]  el1h_64_irq\u002B0x64/0x68 [  800.396603]  default_idle_call\u002B0x3c/0x168 [  800.400606]  do_idle\u002B0x1fc/0x230 [  800.403827]  cpu_startup_entry\u002B0x40/0x50 [  800.407742]  rest_init\u002B0xe4/0xf0 [  800.410962]  start_kernel\u002B0x5e8/0x790 [  800.414616]  __primary_switched\u002B0x80/0x90 [  800.418622] Code: 8b170277 8b160296 11000421 b9000861 (b9401ac1) [  800.424707] ---[ end trace 0000000000000000 ]--- [  800.457313] ---[ end Kernel panic - not syncing: Oops: Fatal exception in interrupt ]---  This issue happens when the file descriptor is closed before the jobs submitted by it are completed. When the job completes, we update the global GPU stats and the per-fd GPU stats, which are exposed through fdinfo. If the file descriptor was closed, then the struct \u0060v3d_file_priv\u0060 and its stats were already freed and we can\u0027t update the per-fd stats.  Therefore, if the file descriptor was already closed, don\u0027t u ---truncated---",
  "published": "2025-07-04T14:15:25Z",
  "severity": "Moderate",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "cwe": "NULL Pointer Dereference",
  "epss": 0.00191,
  "epssPercentile": 0.08845,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-38189",
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.11.1",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.11.1",
      "fix": "SUSE-SU-2025:03011-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03011-1",
      "released": "2025-08-28T12:06:15Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.11.1",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.11.1.150700.17.9.4",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.11.3",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_3",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.5.1",
      "fix": "SUSE-SU-2025:02853-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02853-1",
      "released": "2025-08-18T16:01:54Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7_Update_3",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.4",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.11.1",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.11.1",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.11.1",
      "fix": "SUSE-SU-2025:03011-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03011-1",
      "released": "2025-08-28T12:06:15Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.11.1",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.11.1",
      "fix": "SUSE-SU-2025:03011-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03011-1",
      "released": "2025-08-28T12:06:15Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.11.1",
      "fix": "SUSE-SU-2025:02997-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02997-1",
      "released": "2025-08-27T12:04:21Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.35-1",
      "fix": "DEBIAN-CVE-2025-38189",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-38189",
      "released": "2025-07-04T14:15:25Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.12.35-1",
      "fix": "DEBIAN-CVE-2025-38189",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-38189",
      "released": "2025-07-04T14:15:25Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}