CVE-2025-38254

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the Linux kernel’s DRM/AMD/display component where the drm edid raw() function does not guarantee a proper Extended Display Identification Data (EDID) return. This can result in an Oops (kernel panic) if NULL is returned, or memory corruption if the returned EDID data exceeds the allocated buffer size. The issue was reported when connected with a faulty adapter. Sanity checks have been added to drm edid raw() to address these cases, returning EDID BAD INPUT accordingly.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.