CVE-2025-21784: drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: bail out when failed to load fw in pspinitcapmicrocode()
In function pspinitcapmicrocode(), it should bail out when failed to load firmware, otherwise it may cause invalid memory access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel function psp_init_cap_microcode(), bail out when firmware loading fails to prevent invalid memory access.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21784?
CVE-2025-21784 is considered a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2025-21784?
To fix CVE-2025-21784, update your Linux kernel to the latest patched version.
What is the impact of CVE-2025-21784?
CVE-2025-21784 can lead to invalid memory access, potentially causing crashes or other unpredictable behavior.
Which versions of the Linux kernel are affected by CVE-2025-21784?
Specific versions of the Linux kernel are affected, and it is advised to check the latest updates from the Linux distribution you are using.
Is CVE-2025-21784 remotely exploitable?
CVE-2025-21784 is not directly remotely exploitable, as it requires local access to trigger the firmware loading issue.