PT-2025-51570 · Linux+4 · Linux Kernel+4

CVE-2025-40354

·

Published

2025-10-21

·

Updated

2026-08-25

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the DRM/AMD display subsystem. Specifically, the dc->links[MAX LINKS] array size was insufficient, leading to potential issues. Additionally, the hw init() function could access a null pointer (LINK ENC) for DPIA non-display endpoints. This issue was addressed by increasing the array size and correcting the null pointer access.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-01261
CVE-2025-40354
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
SUSE-SU-2026:20564-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1

Affected Products

Amd
Debian
Linuxmint
Linux Kernel
Ubuntu