CVE-2025-21985

drm/amd/display: Fix out-of-bound accesses

published April 1, 2025

CVSS
—
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix out-of-bound accesses

[WHAT & HOW]

hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4),

but location can have size up to 6. As a result, it is necessary to

check location against MAX_HPO_DP2_ENCODERS.

Similiarly, disp_cfg_stream_location can be used as an array index which

should be 0..5, so the ASSERT's conditions should be less without equal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Published
2025-04-01T15:47Z
EPSS history
Timeline
  • 01 APR 15:47Z
    drm/amd/display: Fix out-of-bound accesses
    cvelistv5