---
id: CVE-2025-40360
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/sysfb: Do not dereference NULL pointer in plane reset

  The plane state in __drm_gem_reset_shadow_plane() can be NULL
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/sysfb: Do not dereference NULL pointer in plane reset

  The plane state in __drm_gem_reset_shadow_plane() can be NULL. Do not
  deref that pointer, but forward NULL to…
severity: none
published: '2025-12-16'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-40360'
references:
  - url: 'https://git.kernel.org/stable/c/14e02ed3876f4ab0ed6d3f41972175f8b8df3d70'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6abeff03cb79a2c7f4554a8e8738acd35bb37152'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6bdef5648a60e49d4a3b02461ab7ae3776877e77'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b61ed8005bd3102510fab5015ac6a275c9c5ea16'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c4faf7f417eea8b8d5cc570a1015736f307aa2d5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c7d5e69866bbe95c1e4ab4c10a81e0a02d9ea232'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00207
epssPercentile: 0.10008
ingestedAt: '2026-10-14T13:30:58.441Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/sysfb: Do not dereference NULL pointer in plane reset

The plane state in __drm_gem_reset_shadow_plane() can be NULL. Do not
deref that pointer, but forward NULL to the other plane-reset helpers.
Clears plane->state to NULL.

v2:
- fix typo in commit description (Javier)

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.