PT-2025-14366
CVE-2025-21985
·
Published
2025-02-03
·
Updated
2026-10-13
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue concerns out-of-bound accesses in the Linux kernel, specifically in the drm/amd/display component. The problem arises because
hpo stream to link encoder mapping has a size of MAX HPO DP2 ENCODERS (which is 4), but the location can have a size up to 6, necessitating a check against MAX HPO DP2 ENCODERS. Similarly, disp cfg stream location can be used as an array index, which should range from 0 to 5. The conditions in the ASSERT statements should be adjusted to be less than, without equal.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾