CVE-2025-71103 drm/msm: adreno: fix deferencing ifpc_reglist when not declared

Medium 5.5 Published Updated

A null pointer dereference in the Linux kernel's Adreno GPU driver causes a system crash on specific hardware configurations.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2025-71103?

CVE-2025-71103 is a medium-severity vulnerability in Linux kernel, published on 14 Jan 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: adreno: fix deferencing ifpc_reglist when not declared

On plaforms with an a7xx GPU not supporting IFPC, the ifpc_reglist if still deferenced in a7xx_patch_pwrup_reglist() which causes a kernel crash: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 ... pc : a6xx_hw_init+0x155c/0x1e4c [msm] lr : a6xx_hw_init+0x9a8/0x1e4c [msm] ... Call trace: a6xx_hw_init+0x155c/0x1e4c [msm] (P) msm_gpu_hw_init+0x58/0x88 [msm] adreno_load_gpu+0x94/0x1fc [msm] msm_open+0xe4/0xf4 [msm] drm_file_alloc+0x1a0/0x2e4 [drm] drm_client_init+0x7c/0x104 [drm] drm_fbdev_client_setup+0x94/0xcf0 [drm_client_lib] drm_client_setup+0xb4/0xd8 [drm_client_lib] msm_drm_kms_post_init+0x2c/0x3c [msm] msm_drm_init+0x1a4/0x228 [msm] msm_drm_bind+0x30/0x3c [msm] ...

Check the validity of ifpc_reglist before deferencing the table to setup the register values.

Patchwork: https://patchwork.freedesktop.org/patch/688944/

Weakness: CWE-476

Which versions are affected by CVE-2025-71103?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2025-71103?

Apply the vendor's patch.

Is CVE-2025-71103 being exploited?

There is no known exploitation of CVE-2025-71103 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as BELL-CVE-2025-71103, GHSA-p92r-xpjh-hcch, UBUNTU-CVE-2025-71103.

Is CVE-2025-71103 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free