In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpc_client device, potentially leading to NULL pointer dereference.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92 Patch
- https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26 Patch
- https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb Patch
- https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64 Patch
- https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0 Patch
- https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · linuxNVD modified 2026-10-19 21:10
Affected (CPE criteria) 7
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.17:rc6:*:*:*:*:*:*
References 6
- https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92 Patch
- https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26 Patch
- https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb Patch
- https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64 Patch
- https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0 Patch
- https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e Patch