CVE-2025-38254: drm/amd/display: Add sanity checks for drm_edid_raw()
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add sanity checks for drmedidraw()
When EDID is retrieved via drmedidraw(), it doesn't guarantee to return proper EDID bytes the caller wants: it may be either NULL (that leads to an Oops) or with too long bytes over the fixed size rawedid array (that may lead to memory corruption). The latter was reported actually when connected with a bad adapter.
Add sanity checks for drmedidraw() to address the above corner cases, and return EDIDBADINPUT accordingly.
(cherry picked from commit 648d3f4d209725d51900d6a3ed46b7b600140cdf)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 648d3f4d209725d51900d6a3ed46b7b600140cdf
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38254?
CVE-2025-38254 has been classified with a severity that warrants attention due to potential null pointer dereference causing kernel Oops.
How do I fix CVE-2025-38254?
To fix CVE-2025-38254, update the Linux kernel to a version that includes the latest patches addressing the vulnerability.
Which versions of the Linux Kernel are affected by CVE-2025-38254?
CVE-2025-38254 affects multiple versions of the Linux Kernel prior to the patch that resolved the vulnerability.
What impact does CVE-2025-38254 have on systems?
The impact of CVE-2025-38254 includes potential system crashes or instability due to improper EDID handling.
Is CVE-2025-38254 a remote exploit vulnerability?
CVE-2025-38254 is not classified as a remote exploit vulnerability, but it can lead to local privilege escalation if exploited.