Medium 5.5Published Sep 11, 2025

CVE-2025-39772drm/hisilicon/hibmc: fix the hibmc loaded failed bug

Updated under an hour ago (Oct 26, 2026, 10:40 PM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix the hibmc loaded failed bug When hibmc loaded failed, the driver use hibmc_unload to free the resource, but the mutexes in mode.config are not init, which will access an NULL pointer. Just change goto statement to return, because hibnc_hw_init() doesn't need to free anything.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: May 12, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b3df5e65cc03696b0624a877d03a3ddf3ef43f52 before ddf1691f25345699296e642f0f59f2d464722fa3; from b3df5e65cc03696b0624a877d03a3ddf3ef43f52 before c950e1be3a24d021475b56efdb49daa7fbba63a9; from b3df5e65cc03696b0624a877d03a3ddf3ef43f52 before f93032e5d68f459601c701f6ab087b5feb3382e8; from b3df5e65cc03696b0624a877d03a3ddf3ef43f52 before a4f1b9c57092c48bdc7958abd23403ccaed437b2; from b3df5e65cc03696b0624a877d03a3ddf3ef43f52 before d3e774266c28aefab3e9db334fdf568f936cae04; from b3df5e65cc03696b0624a877d03a3ddf3ef43f52 before 93a08f856fcc5aaeeecad01f71bef3088588216a	CNA record
Siemens SIMATIC CN 4100 siemens:simatic_cn_4100 (from the name)	before V5.0	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.14 before 5.15.190; from 5.16 before 6.1.149; from 6.2 before 6.6.103; from 6.7 before 6.12.44; from 6.13 before 6.16.4; 6.17; 6.17	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/ddf1691f25345699296e642f0f59f2d464722fa3	patch
https://git.kernel.org/stable/c/c950e1be3a24d021475b56efdb49daa7fbba63a9	patch
https://git.kernel.org/stable/c/f93032e5d68f459601c701f6ab087b5feb3382e8	patch
https://git.kernel.org/stable/c/a4f1b9c57092c48bdc7958abd23403ccaed437b2	patch
https://git.kernel.org/stable/c/d3e774266c28aefab3e9db334fdf568f936cae04	patch
https://git.kernel.org/stable/c/93a08f856fcc5aaeeecad01f71bef3088588216a	patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html	third-party-advisory
https://cert-portal.siemens.com/productcert/html/ssa-032379.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.