What’s Vulnerable › Vulnerabilities

CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-25 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dce_hwseq before dereferencing it [WHAT] hws was checked for null earlier in dce110_blank_stream, indicating hws can be null, and should be checked whenever it is used. (cherry picked from commit 79db43611ff61280b6de58ce1305e0b2ecf675ad)

Affected products

• Linux kernel: from 4.15 before 6.12.36; from 6.13 before 6.15.5; 6.16-rc1, 6.16-rc2 — fixed in 6.12.36, 6.15.5

How to fix

Upgrade to a fixed version: Linux kernel 6.12.36, 6.15.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/5e1482ae14b03b9fca73ef5afea26ede683f4450
• https://git.kernel.org/stable/c/60e450eec5d63113c6ad5c456ce64c12b4496a6e
• https://git.kernel.org/stable/c/b669507b637eb6b1aaecf347f193efccc65d756e
• https://git.kernel.org/stable/c/df11bf0ef795b6d415c4d8ee54fa3f2105e75bcb
• https://git.kernel.org/stable/c/e881b82f5d3d8d54d168cd276169f0fee01bf0e7

Get alerted when CVE-2025-38361 or the next vulnerability affects your stack