CVE-2025-38362

drm/amd/display: Add null pointer check for get_first_active_display()

MEDIUM
5.5
CVSS Score
Published: July 25, 2025 at 12:47 PM UTC
Updated: June 17, 2026 at 09:16 AM UTC
2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for get_first_active_display() The function mod_hdcp_hdcp1_enable_encryption() calls the function get_first_active_display(), but does not check its return value. The return value is a null pointer if the display list is empty. This will lead to a null pointer dereference in mod_hdcp_hdcp2_enable_encryption(). Add a null pointer check for get_first_active_display() and return MOD_HDCP_STATUS_DISPLAY_NOT_FOUND if the function return null.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.16 ≤ v < 6.1.1435.8 ≤ v < 5.15.1875.8 ≤ v < 6.1.1435.8 ≤ v < 6.12.365.8 ≤ v < 6.15.55.8 ≤ v < 6.165.8 ≤ v < 6.6.966.13 ≤ v < 6.15.56.2 ≤ v < 6.6.966.7 ≤ v < 6.12.362deade5ede56581722c0d7672f28b09548dc0fc45.8
Vendor states this is fixed in 1ebcdf38887949def1a553ff3e45c98ed95a3cd0 (fixed)
Vendor states this is fixed in 34d3e10ab905f06445f8dbd8a3d9697095e71bae (fixed)
Vendor states this is fixed in 4ce9f2dc9ff7cc410e8c5d936ec551e26b9599a9 (fixed)
Vendor states this is fixed in 5148c7ea69e9c5bf2f05081190f45ba96d3d1e7a (fixed)
Vendor states this is fixed in b3005145eab98d36777660b8893466e4f630ae1c (fixed)
Vendor states this is fixed in c3e9826a22027a21d998d3e64882fa377b613006 (fixed)
Vendor states this is fixed in 5.15.187 (unaffected)
Vendor states this is fixed in 5.8 (unaffected)
Vendor states this is fixed in 6.1.143 (unaffected)
Vendor states this is fixed in 6.12.36 (unaffected)
Vendor states this is fixed in 6.15.5 (unaffected)
Vendor states this is fixed in 6.16 (unaffected)
Vendor states this is fixed in 6.6.96 (unaffected)

References (7)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1ebcdf38887949def1a553ff3e45c98ed95a3cd0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/34d3e10ab905f06445f8dbd8a3d9697095e71bae
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4ce9f2dc9ff7cc410e8c5d936ec551e26b9599a9
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5148c7ea69e9c5bf2f05081190f45ba96d3d1e7a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b3005145eab98d36777660b8893466e4f630ae1c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c3e9826a22027a21d998d3e64882fa377b613006
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card