CVE-2025-38319: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pp: Fix potential NULL pointer dereference in atomctrlinitializemcregtable
The function atomctrlinitializemcregtable() and atomctrlinitializemcregtablev22() does not check the return value of smuatomgetdatatable(). If smuatomgetdatatable() fails to retrieve vraminfo, it returns NULL which is later dereferenced.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38319?
The severity of CVE-2025-38319 is classified as medium due to the potential for a NULL pointer dereference in specific functions.
How do I fix CVE-2025-38319?
To fix CVE-2025-38319, update your Linux kernel to the latest stable version that includes the patch.
Which versions of the Linux kernel are affected by CVE-2025-38319?
CVE-2025-38319 affects specific versions of the Linux kernel that include the vulnerable functions without proper return value checks.
What impact does CVE-2025-38319 have on system security?
CVE-2025-38319 can lead to system instability or crashes due to a potential NULL pointer dereference.
Is CVE-2025-38319 being actively exploited?
As of now, there is no public indication that CVE-2025-38319 is being actively exploited in the wild.