CVE-2025-21987: drm/amdgpu: init return value in amdgpu_ttm_clear_buffer
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: init return value in amdgputtmclearbuffer
Otherwise an uninitialized value can be returned if amdgpurescleared returns true for all regions.
Possibly closes: https://gitlab.freedesktop.org/drm/amd/-/issues/3812
(cherry picked from commit 7c62aacc3b452f73a1284198c81551035fac6d71)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 7c62aacc3b452f73a1284198c81551035fac6d71
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21987?
CVE-2025-21987 has been assessed with a moderate severity level due to the potential impact on system stability.
How do I fix CVE-2025-21987?
To fix CVE-2025-21987, update to the latest stable release of the Linux kernel that includes the patch for this vulnerability.
What are the potential risks of CVE-2025-21987?
The primary risk associated with CVE-2025-21987 is the exposure to stability issues due to uninitialized values being returned.
Which systems are affected by CVE-2025-21987?
CVE-2025-21987 affects systems running vulnerable versions of the Linux kernel that include the amdgpu driver.
Is there a public exploit for CVE-2025-21987?
As of now, there are no known public exploits for CVE-2025-21987, but it is advisable to apply the patch to mitigate risks.