CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses
drm/amd/display: Fix out-of-bound accesses
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Fix out-of-bound accesses by validating that any use of disp_cfg_stream_location as an array index is checked against MAX_HPO_DP2_ENCODERS, and adjust the ASSERT conditions for hpo_stream_to_link_encoder_mapping (size MAX_HPO_DP2_ENCODERS(=4)) so they check the index range without allowing an index value equal to the upper bound.
Linux kernel drm/amd/display hpo_stream_to_link_encoder_mapping index bounds (ASSERT conditions) = Update ASSERT conditions so the index range is 0..5 (use less-than instead of less-than-or-equal)
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21985?
CVE-2025-21985 is considered a medium severity vulnerability in the Linux kernel due to the potential for out-of-bounds access.
How do I fix CVE-2025-21985?
To fix CVE-2025-21985, ensure that you update your Linux kernel to the latest version where the vulnerability has been patched.
What impact does CVE-2025-21985 have on system security?
CVE-2025-21985 can lead to potential denial of service or arbitrary code execution due to out-of-bounds memory access.
Which versions of the Linux kernel are affected by CVE-2025-21985?
CVE-2025-21985 affects several versions of the Linux kernel prior to the patch, specifically those that handle AMD display drivers.
What components are involved in CVE-2025-21985?
CVE-2025-21985 involves the AMD display driver component in the Linux kernel and its handling of encoder mappings.