PT-2026-2885 · Linux+2 · Linux Kernel+2

Published 2025-01-01 · Updated 2026-05-07 · CVE-2025-71124

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s DRM MSM A6xx driver where a NULL pointer dereference could occur. Specifically, the preempt prepare postamble() function was being called before verifying the validity of preempt postamble ptr. If preempt postamble ptr was NULL, dereferencing it would lead to a system crash. The issue was addressed by moving the call to preempt prepare postamble() after the validity check, preventing the dereference when the postamble allocation fails and ensuring proper error handling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03370

CVE-2025-71124

USN-8177-1

USN-8177-2

USN-8183-1

USN-8183-2

USN-8245-1

USN-8257-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 168

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71124.json · Exploit
• https://ubuntu.com/security/CVE-2025-71073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71098 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8183-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71131 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71104 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71084 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-71124 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-71124 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71102 · Vendor Advisory