---
id: CVE-2025-68228
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/plane: Fix create_in_format_blob() return value

  create_in_format_blob() is either supposed to return a valid
  pointer or an error, but never NULL
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/plane: Fix create_in_format_blob() return value

  create_in_format_blob() is either supposed to return a valid
  pointer or an error, but never NULL. The caller will d…
severity: none
published: '2025-12-16'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68228'
references:
  - url: 'https://git.kernel.org/stable/c/860f93f4fce1e733b8a2474f6bfa153243d775f3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/cead55e24cf9e092890cf51c0548eccd7569defa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00185
epssPercentile: 0.07486
ingestedAt: '2026-10-14T13:30:58.460Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/plane: Fix create_in_format_blob() return value

create_in_format_blob() is either supposed to return a valid
pointer or an error, but never NULL. The caller will dereference
the blob when it is not an error, and thus will oops if NULL
returned. Return proper error values in the failure cases.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.