PT-2025-34430 · Linux+1 · Linux Kernel+1

Published 2025-07-17 · Updated 2026-04-20 · CVE-2025-38669

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the Linux kernel related to a reversion of a previous commit (1a148af06000e545e714fe3210af3d77ff903c11) that introduced a NULL-pointer dereference. The dma buf field within the drm gem object structure is not stable throughout the object's lifecycle, becoming NULL when the final GEM handle is released. Previous workarounds did not fully address the issue, particularly for buffer objects lacking a DRM framebuffer association. The reversion restores the use of .import attach->dmabuf.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-01381

CVE-2025-38669

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38669.json · Exploit
• https://git.kernel.org/stable/c/291a77604858a8b47cf6640a12b76e97f99e00ed · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2025-38669 · Vendor Advisory
• https://git.kernel.org/stable/c/6d496e9569983a0d7a05be6661126d0702cf94f7 · Patch
• https://cve.org/CVERecord?id=CVE-2025-38669 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38669 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01381 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2025-38669 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-38669 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38669 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38669 · Security Note
• https://lore.kernel.org/linux-cve-announce/2025082201-CVE-2025-38669-d1f0@gregkh · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1958933880720748585 · Twitter Post
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.15.9 · Note