CVE-2025-40148 | Linux Kernel up to 6.17.2 dc_stream_set_cursor_attributes null pointer dereference

November 12, 2025 Yanac

A vulnerability marked as critical has been reported in Linux Kernel up to 6.17.2. Impacted is the function dc_stream_set_cursor_attributes. This manipulation causes null pointer dereference.

This vulnerability is handled as CVE-2025-40148. The attack can only be done within the local network. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More