CVE-2025-38021: drm/amd/display: Fix null check of pipe_ctx->plane_state for update_dchubp_dpp
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix null check of pipectx->planestate for updatedchubpdpp
Similar to commit 6a057072ddd1 ("drm/amd/display: Fix null check for pipectx->planestate in dcn20programpipe") that addresses a null pointer dereference on dcn20updatedchubpdpp. This is the same function hooked for updatedchubpdpp in dcn401, with the same issue. Fix possible null pointer deference on dcn401programpipe too.
(cherry picked from commit d8d47f739752227957d8efc0cb894761bfe1d879)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch d8d47f739752227957d8efc0cb894761bfe1d879
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38021?
The severity of CVE-2025-38021 is classified as medium due to potential impact on system stability.
How do I fix CVE-2025-38021?
To fix CVE-2025-38021, update your Linux kernel or AMD display driver to the latest version that addresses this vulnerability.
What systems are affected by CVE-2025-38021?
CVE-2025-38021 affects the Linux kernel and AMD Display Driver.
What type of vulnerability is CVE-2025-38021?
CVE-2025-38021 is a null pointer dereference vulnerability in the Linux kernel.
Is there a workaround for CVE-2025-38021?
No specific workaround is available for CVE-2025-38021; updating is the recommended action.