CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1
[Why] If the dummy values in populatedummydmlsurfacecfg() aren't updated then they can lead to a divide by zero in downstream callers like CalculateVMAndRowBytes()
[How] Initialize dummy value to a value to avoid divide by zero.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.115-2~deb12u1 - Upgrade
Upgrade
ubuntu/linux-aws-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1015.15~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1014.14~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-nvidia-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-gcp-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1018.19~24.04.1 - Upgrade
Upgrade
ubuntu/linux-oem-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1014.14 - Upgrade
Upgrade
ubuntu/linux-oracle-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1015.15~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-34.34.1~24.04.1 - Upgrade
Upgrade
ubuntu/linux-realtime-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1014.14~24.04.1 - Configuration
Initialize the dummy pitch value in populate_dummy_dml_surface_cfg() to 1 to avoid divide-by-zero errors in downstream callers such as CalculateVMAndRowBytes().
Linux kernel drm/amd/display dummy pitch = 1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38205?
CVE-2025-38205 has a severity rating of medium due to the potential impact of a divide by zero vulnerability.
How do I fix CVE-2025-38205?
To fix CVE-2025-38205, ensure you update your Linux kernel to the latest stable version where the issue has been addressed.
Which versions of the Linux kernel are affected by CVE-2025-38205?
CVE-2025-38205 affects multiple versions of the Linux kernel; users should upgrade to the patched version for protection.
What causes CVE-2025-38205?
CVE-2025-38205 is caused by uninitialized dummy values in the function populate_dummy_dml_surface_cfg leading to a divide by zero error.
Is CVE-2025-38205 a remote vulnerability?
CVE-2025-38205 is not classified as a remote vulnerability but can potentially be exploited in local contexts.