What’s Vulnerable › Vulnerabilities

CVE-2025-21941: drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-01 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params Null pointer dereference issue could occur when pipe_ctx->plane_state is null. The fix adds a check to ensure 'pipe_ctx->plane_state' is not null before accessing. This prevents a null pointer dereference. Found by code review. (cherry picked from commit 63e6a77ccf239337baa9b1e7787cde9fa0462092)

Affected products

• Linux kernel: from 4.15 before 5.10.236; from 5.11 before 5.15.180; from 5.16 before 6.1.131; from 6.2 before 6.6.83; from 6.7 before 6.12.19; from 6.13 before 6.13.7 — fixed in 5.10.236, 5.15.180, 6.1.131, 6.12.19, 6.13.7, 6.6.83

How to fix

Upgrade to a fixed version: Linux kernel 5.10.236, 5.15.180, 6.1.131, 6.12.19. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/265422915416468ba91bffa56addbff45e18342a
• https://git.kernel.org/stable/c/3748fad09d89e9a5290e1738fd6872a79f794743
• https://git.kernel.org/stable/c/374c9faac5a763a05bc3f68ad9f73dab3c6aec90
• https://git.kernel.org/stable/c/3b3c2be58d5275aa59d8b4810a59f173f2f5bac1
• https://git.kernel.org/stable/c/c1e54752dc12e90305eb0475ca908f42f5b369ca
• https://git.kernel.org/stable/c/e0345c3478f185ca840daac7f08a1fcd4ebec3e9
• https://git.kernel.org/stable/c/f435192e00bc4d5d4134356b93212670ec47fa8d
• https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Get alerted when CVE-2025-21941 or the next vulnerability affects your stack