CVE-2025-38363: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel's DRM Tegra driver was discovered and assigned CVE-2025-38363. The issue was reported on July 25, 2025, and involves a potential null pointer dereference in the tegracrtcreset() function (NVD).

The vulnerability occurs in the DRM Tegra driver where new memory is allocated using kzalloc() without proper validation. Specifically, in the tegracrtcreset() function, there is no check performed on the allocated memory before calling _drmatomichelpercrtc_reset, which could lead to a null pointer dereference (NVD).

The vulnerability affects various Ubuntu distributions and kernel versions, with multiple packages marked as vulnerable including linux-azure, linux-gcp, linux-kvm, and others. The issue primarily impacts systems running the Tegra graphics driver (Ubuntu).

Multiple Linux distributions have released updates to address this vulnerability. Ubuntu has marked several kernel packages for updates, particularly in versions 22.04 LTS and 24.04 LTS. Users are advised to update their systems to the latest kernel version that includes the fix (Ubuntu).