CVE-2025-21941

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

Null pointer dereference issue could occur when pipe_ctx->plane_state is null. The fix adds a check to ensure 'pipe_ctx->plane_state' is not null before accessing. This prevents a null pointer dereference.

Found by code review.

(cherry picked from commit 63e6a77ccf239337baa9b1e7787cde9fa0462092)

Affected Software

VendorProductVersion RangeStatus
LinuxLinux3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 < 265422915416468ba91bffa56addbff45e18342aaffected
LinuxLinux3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 < f435192e00bc4d5d4134356b93212670ec47fa8daffected
LinuxLinux3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 < c1e54752dc12e90305eb0475ca908f42f5b369caaffected
LinuxLinux3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 < 3b3c2be58d5275aa59d8b4810a59f173f2f5bac1affected
LinuxLinux3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 < e0345c3478f185ca840daac7f08a1fcd4ebec3e9affected
LinuxLinux3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 < 3748fad09d89e9a5290e1738fd6872a79f794743affected
LinuxLinux3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 < 374c9faac5a763a05bc3f68ad9f73dab3c6aec90affected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux5.10.236 <= 5.10.*unaffected
LinuxLinux5.15.180 <= 5.15.*unaffected
LinuxLinux6.1.131 <= 6.1.*unaffected
LinuxLinux6.6.83 <= 6.6.*unaffected
LinuxLinux6.12.19 <= 6.12.*unaffected
LinuxLinux6.13.7 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References