CVE-2025-40354

CVE-2025-40354

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: increase max link count and fix link->enc NULL pointer access

[why]

1.) dc->links[MAX_LINKS] array size smaller than actual requested.

max_connector + max_dpia + 4 virtual = 14.

increase from 12 to 14.

2.) hw_init() access null LINK_ENC for dpia non display_endpoint.

(cherry picked from commit d7f5a61e1b04ed87b008c8d327649d184dc5bb45)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00152 · 4.0th percentile
Published
2025-12-16T19:15Z
References (3)
https://git.kernel.org/stable/c/a3fc0d36cfb927f8986b83bf5fba47dbedad3c63 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bec947cbe9a65783adb475a5fb47980d7b4f4796 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f28092be4e12b7df9e4f415d25bf0d767bc2d9ed · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 DEC 13:30Z
    drm/amd/display: increase max link count and fix link->enc NULL pointer access
    cvelistv5