Answer in brief
CVE-2025-38597 records a Unknown severity vulnerability in drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=604be85547ce4d61b89292d2f9a78c721b778c16 <45be183b9944f765b77623daffb024cb38d192bf || >=604be85547ce4d61b89292d2f9a78c721b778c16 <8fc974776c668fef1fc73fefbf573a076bb073e8 || >=604be85547ce4d61b89292d2f9a78c721b778c16 <e1eef239399927b368f70a716044fb10085627c8 || >=604be85547ce4d61b89292d2f9a78c721b778c16 <38682edbbad272b5f8c7bf55128b42cd10626f73 || >=604be85547ce4d61b89292d2f9a78c721b778c16 <f9f68bf1d0efeadb6c427c9dbb30f307a7def19b | 45be183b9944f765b77623daffb024cb38d192bf, 8fc974776c668fef1fc73fefbf573a076bb073e8, e1eef239399927b368f70a716044fb10085627c8, 38682edbbad272b5f8c7bf55128b42cd10626f73, f9f68bf1d0efeadb6c427c9dbb30f307a7def19b |
| Linux/Linuxgeneric | 5.19 | Not reported |
Published upstream
Aug 19, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 21, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port Each window of a vop2 is usable by a specific set of video ports, so while binding the vop2, we look through the list of available windows trying to find one designated as primary-plane and usable by that specific port. The code later wants to use drm_crtc_init_with_planes with that found primary plane, but nothing has checked so far if a primary plane was actually found. For whatever reason, the rk3576 vp2 does not have a usable primary window (if vp0 is also in use) which brought the issue to light and ended in a null-pointer dereference further down. As we expect a primary-plane to exist for a video-port, add a check at the end of the window-iteration and fail probing if none was found.
Quoted source text, attributed separately from HOL analysis.