CVE-2025-21968

drm/amd/display: Fix slab-use-after-free on hdcp_work

High · published April 1, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix slab-use-after-free on hdcp_work

[Why]

A slab-use-after-free is reported when HDCP is destroyed but the

property_validate_dwork queue is still running.

[How]

Cancel the delayed work when destroying workqueue.

(cherry picked from commit 725a04ba5a95e89c89633d4322430cfbca7ce128)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Published
2025-04-01T15:47Z
EPSS history
Timeline
  • 01 APR 15:47Z
    drm/amd/display: Fix slab-use-after-free on hdcp_work
    cvelistv5