01 Record

CVE-2025-21688

drm/v3d: Assign job pointer to NULL before signaling the fence

MediumPUBLISHEDCNA: Linux

CNA base score4.7 CVSS v3.xCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

drm/v3d: Assign job pointer to NULL before signaling the fence

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.18% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 8.2% of scored records. A rank, not a probability.

NVD base score

4.7 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-10 15:58Z1 YR AGO

Last updated

2026-05-23 15:56Z3 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 4.7)

CNA CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class

Data version

5.2

Document digest

c56498d80ae284d0810cfae1f8c3fa00f85fb4cd814db9088221aa6df77396b7

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1bd6303d08c85072ce40ac01a767ab67195105bd to < 9793206fbf5293534c3a79d78f196e2cbb48c22d, a34050f70e7955a359874dff1a912a748724a140 to < 1f66a3a1a516e4d545906916b3f3c8d1c5e909e6, 14e0a874488e79086340ba8e2d238cb9596b68a8 to < 6cfafcad46e95351c477da0ae7e3acb8f7550ada, 2a1c88f7ca5c12dff6fa6787492ac910bb9e4407 to < a9401cd5d1bb5a0b8d2bef09623ca43551cd6e8a, 63195bae1cbf78f1d392b1bc9ae4b03c82d0ebf3 to < 431fb709db434565b5e7cee82a11bd681a794fd3, b22467b1ae104073dcb11aa78562a331cd7fb0e0 to < 01a7e3a43ee2e6607169a75889412344c10b37fd, e4b5ccd392b92300a2b341705cc4805681094e49 to < 3059e7aaa280daea57bb069fbc65225e1bb95014, e4b5ccd392b92300a2b341705cc4805681094e49 to < 6e64d6b3a3c39655de56682ec83e894978d23412, 5.15.177 to < 5.15.178, 6.1.127 to < 6.1.128, 6.6.74 to < 6.6.75, 6.12.11 to < 6.12.12, 6.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/9793206fbf5293534c3a79d78f196e2cbb48c22d
git.kernel.orghttps://git.kernel.org/stable/c/1f66a3a1a516e4d545906916b3f3c8d1c5e909e6
git.kernel.orghttps://git.kernel.org/stable/c/6cfafcad46e95351c477da0ae7e3acb8f7550ada
git.kernel.orghttps://git.kernel.org/stable/c/a9401cd5d1bb5a0b8d2bef09623ca43551cd6e8a
git.kernel.orghttps://git.kernel.org/stable/c/431fb709db434565b5e7cee82a11bd681a794fd3
git.kernel.orghttps://git.kernel.org/stable/c/01a7e3a43ee2e6607169a75889412344c10b37fd
git.kernel.orghttps://git.kernel.org/stable/c/3059e7aaa280daea57bb069fbc65225e1bb95014
git.kernel.orghttps://git.kernel.org/stable/c/6e64d6b3a3c39655de56682ec83e894978d23412
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2025-21688

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-21688

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References