Linux Kernel HDMI Audio Callback Null Pointer Dereference Vulnerability

Vulnerability

A vulnerability in the Linux kernel's HDMI audio handling can lead to a null pointer dereference. When a driver is removed, the HDMI codec's removal function calls a callback with a null function pointer, causing a kernel Oops error. The vulnerability arises because the callback is executed without checking if the function pointer is non-null. The issue has been fixed by ensuring the callback is only called if the function pointer is valid, allowing the callback members to be properly cleared.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a kernel Oops error, which can potentially be exploited to escalate privileges or cause a denial-of-service condition by crashing the system.

Added: Jul 3, 2025, 10:39 AM
Updated: Jul 3, 2025, 10:39 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.