Impact
In the Linux kernel’s Rockchip DRM driver for Analogix DP displays, a missing error check allows the driver to dereference a NULL pointer returned by platform_get_resource(). When the memory resource is unavailable, the unconditionally used pointer causes a kernel panic, leading to a denial of service on the affected system.
Affected Systems
The vulnerability affects any Linux kernel installation that includes the analogix_dp module within the Rockchip DRM stack. Devices that rely on Analogix DP output on Rockchip SoCs may be impacted. Because the advisory does not specify exact kernel versions, any kernel tree with the unpatched driver should be considered vulnerable.
Risk and Exploitability
No EPSS score is available and the issue is not listed in CISA KEV. The CVSS score is not provided, but a crash would destabilize the kernel. Exploitation would likely involve a configuration or boot-time scenario that causes the driver to miss a memory resource, possibly through a crafted device tree or by disabling the resource. While there is no known public exploitation, the risk is moderate until a patched kernel is deployed.
OpenCVE Enrichment