CVE-2025-38371 – A race condition in the Linux kernel's v3d grap... (How to Fix)

Q: What is the severity of CVE-2025-38371?

CVE-2025-38371 has a CVSS score of 5.5 (MEDIUM). A race condition in the Linux kernel's v3d graphics driver allows interrupts to be triggered during GPU resets, leading to NULL pointer dereferences and kernel panics. This affects systems using Broadcom VideoCore VI (V3D) graphics hardware, particularly Raspberry Pi devices. The vulnerability can cause system crashes and denial of service.

📋 TL;DR

A race condition in the Linux kernel's v3d graphics driver allows interrupts to be triggered during GPU resets, leading to NULL pointer dereferences and kernel panics. This affects systems using Broadcom VideoCore VI (V3D) graphics hardware, particularly Raspberry Pi devices. The vulnerability can cause system crashes and denial of service.

💻 Affected Systems

Products:

Linux kernel with v3d driver

Versions: Linux kernel versions before the fix commits (specific versions vary by distribution)

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Primarily affects systems with Broadcom VideoCore VI (V3D) graphics hardware, including Raspberry Pi 4 and later models. The vulnerability is present when the v3d driver is loaded and active.

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to complete system crash and denial of service, potentially causing data loss or corruption if the system is performing critical operations.

🟠

Likely Case

System instability, GPU hangs, and occasional kernel panics during graphics-intensive operations or GPU resets.

🟢

If Mitigated

Minor performance impact from disabling interrupts during resets, but system remains stable.

🌐 Internet-Facing: LOW - This is a local kernel vulnerability requiring local access or ability to trigger GPU operations.

🏢 Internal Only: MEDIUM - Could be exploited by local users or through applications that trigger GPU resets, potentially causing system-wide instability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM - Requires triggering GPU resets and precise timing to hit the race condition.

Exploitation requires local access and ability to trigger GPU operations. The vulnerability was discovered through crash analysis rather than active exploitation.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Linux kernel with commits 226862f50a7a88e4e4de9abbf36c64d19acd6fd0, 2446e25e9246e0642a41d91cbf54c33b275da3c3, 387da3b6d1a90e3210bc9a7fb56703bdad2ac18a, 576a6739e08ac06c67f2916f71204557232388b0, or 9ff95ed0371aec4d9617e478e9c69cde86cd7c38

Vendor Advisory: https://git.kernel.org/stable/c/226862f50a7a88e4e4de9abbf36c64d19acd6fd0

Restart Required: Yes

Instructions:

1. Update Linux kernel to version containing the fix commits. 2. For Raspberry Pi OS: sudo apt update && sudo apt upgrade. 3. For other distributions: Use standard kernel update procedures. 4. Reboot the system after update.

🔧 Temporary Workarounds

Disable v3d driver

linux

Prevent loading of the vulnerable v3d graphics driver

echo 'blacklist v3d' | sudo tee /etc/modprobe.d/blacklist-v3d.conf
sudo update-initramfs -u
sudo reboot

Disable GPU acceleration

linux

Reduce likelihood of GPU resets by disabling hardware acceleration

Add 'nomodeset' to kernel boot parameters in /boot/cmdline.txt or GRUB configuration

🧯 If You Can't Patch

Restrict local user access to systems with vulnerable kernels
Monitor system logs for kernel panic messages related to v3d_irq

🔍 How to Verify

Check if Vulnerable:

Check if v3d module is loaded: lsmod | grep v3d. Check kernel version: uname -r and compare with patched versions.

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes fix commits. Check dmesg for v3d-related errors after system operation.

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages mentioning v3d_irq
NULL pointer dereference at address 00000000000000c0
GPU hang messages in dmesg

Network Indicators:

None - this is a local kernel vulnerability

SIEM Query:

source="kernel" AND ("v3d_irq" OR "NULL pointer dereference" OR "GPU reset")

📊 Metadata

CVE ID: CVE-2025-38371

CVSS v3 Score: 5.5 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-476

EPSS Score: 0.02% exploit probability (6th percentile)

Published: July 25, 2025

Last Updated: December 16, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-38371, you might also want to check these: