PT-2025-14366

CVE-2025-21985

·

Published

2025-02-03

·

Updated

2026-10-13

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue concerns out-of-bound accesses in the Linux kernel, specifically in the drm/amd/display component. The problem arises because hpo stream to link encoder mapping has a size of MAX HPO DP2 ENCODERS (which is 4), but the location can have a size up to 6, necessitating a check against MAX HPO DP2 ENCODERS. Similarly, disp cfg stream location can be used as an array index, which should range from 0 to 5. The conditions in the ASSERT statements should be adjusted to be less than, without equal.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-62672
ECHO-55F9-027B-7F68
OPENSUSE-SU-2025_01614-1
OPENSUSE-SU-2025_01707-1
SUSE-SU-2025:01614-1
SUSE-SU-2025_01614-1
SUSE-SU-2025:01707-1
SUSE-SU-2025_01707-1
SUSE-SU-2025:01919-1
SUSE-SU-2025:01951-1
SUSE-SU-2025_01951-1
SUSE-SU-2025:01964-1
SUSE-SU-2025_01964-1
SUSE-SU-2025:01967-1
SUSE-SU-2025_01967-1
SUSE-SU-2025:20343-1
SUSE-SU-2025:20344-1
SUSE-SU-2025:20354-1
SUSE-SU-2025:20355-1
USN-8781-1
USN-8917-1
USN-8918-1
Found an issue in the description? Have something to add? Feel free to write us 👾