Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21985

drm/amd/display: Fix out-of-bound accesses

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses [WHAT & HOW] hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAX_HPO_DP2_ENCODERS. Similiarly, disp_cfg_stream_location can be used as an array index which should be 0..5, so the ASSERT's conditions should be less without equal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 36793d90d76f667d26c6dd025571481ee0c96abcaffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 9aedc776b11038f04f4641241bb7e877781e4aa4affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 8adbb2a98b00926315fd513b5fe2596b5716b82daffected

Linux Linux

Default version status: affected

  • 4.15affected
  • 0 to < 4.15unaffected
  • 6.12.20 to ≤ 6.12.*unaffected
  • 6.13.8 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References