CVE-2025-68228
drm/plane: Fix create_in_format_blob() return value
Reported by linux · Published December 16, 2025
In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix create_in_format_blob() return value create_in_format_blob() is either supposed to return a valid pointer or an error, but never NULL. The caller will dereference the blob when it is not an error, and thus will oops if NULL returned. Return proper error values in the failure cases.
EPSS 0.19% · 8.1th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | cead55e24cf9e092890cf51c0548eccd7569defa, 860f93f4fce1e733b8a2474f6bfa153243d775f3 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 0d6dcd741c266389bbf0a8758f537b3a171ac32a, 0d6dcd741c266389bbf0a8758f537b3a171ac32a |
| Linux | Linux | 6.16, 0, 6.17.10 |
| Linux | Linux | 6.18, 0, 6.17.10 |
| linux | linux_kernel | 6.16, 6.16 |
Timeline
- Dec 16, 2025 CVE Published
- Dec 17, 2025 EPSS Score (30 in total, the first dated here)
- Mar 26, 2026 Coalition ESS Score (2 in total, the first dated here)
- Mar 29, 2026 Distribution Patch (167 in total, the first dated here)
- Mar 29, 2026 Security Advisory (173 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-68228
vulnetix vdb fixes CVE-2025-68228Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-68228/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart