Security tracker / CVE-2025-38597

CVE-2025-38597

drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 604be85547ce ("drm/rockchip: Add VOP2 driver"). Vulnerable
 carnil> versions: 5.19.

Bugs

Status

Branch	Status
upstream	released (6.17-rc1) [f9f68bf1d0efeadb6c427c9dbb30f307a7def19b]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.16-upstream-stable	released (6.16.1) [38682edbbad272b5f8c7bf55128b42cd10626f73]
6.15-upstream-stable	released (6.15.10) [e1eef239399927b368f70a716044fb10085627c8]
6.12-upstream-stable	needed
6.6-upstream-stable	needed
6.1-upstream-stable	needed
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.16.3-1)
6.12-trixie-security	needed
6.1-bookworm-security	needed
5.10-bullseye-security	N/A "Vulnerable code not present"