BaseFortify

Publication date: 2025-12-16

Last updated on: 2025-12-18

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link->enc NULL pointer access [why] 1.) dc->links[MAX_LINKS] array size smaller than actual requested. max_connector + max_dpia + 4 virtual = 14. increase from 12 to 14. 2.) hw_init() access null LINK_ENC for dpia non display_endpoint. (cherry picked from commit d7f5a61e1b04ed87b008c8d327649d184dc5bb45)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-16

Last Modified

2025-12-18

Generated

2026-07-06

AI Q&A

2025-12-16

EPSS Evaluated

2026-07-04

NVD

CVE-2025-40354

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's AMD display driver involves an incorrect array size for the dc->links[MAX_LINKS] array, which was smaller than the actual number of requested links (14 needed, but only 12 allocated). Additionally, there was a null pointer access issue in the hw_init() function when accessing LINK_ENC for dpia non display_endpoint. These issues could lead to improper handling of display links and potential null pointer dereferences.

Impact Analysis

The vulnerability could cause system instability or crashes due to null pointer dereferences in the AMD display driver. This may affect the display functionality on affected Linux systems, potentially leading to denial of service or degraded user experience.

Hi! I’m here to help you understand CVE-2025-40354. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70