CVE-2025-40354
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-16

Last updated on: 2025-12-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link->enc NULL pointer access [why] 1.) dc->links[MAX_LINKS] array size smaller than actual requested. max_connector + max_dpia + 4 virtual = 14. increase from 12 to 14. 2.) hw_init() access null LINK_ENC for dpia non display_endpoint. (cherry picked from commit d7f5a61e1b04ed87b008c8d327649d184dc5bb45)
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-16
Last Modified
2025-12-18
Generated
2026-06-16
AI Q&A
2025-12-16
EPSS Evaluated
2026-06-14
NVD
CVE-2025-40354
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel's AMD display driver involves an incorrect array size for the dc->links[MAX_LINKS] array, which was smaller than the actual number of requested links (14 needed, but only 12 allocated). Additionally, there was a null pointer access issue in the hw_init() function when accessing LINK_ENC for dpia non display_endpoint. These issues could lead to improper handling of display links and potential null pointer dereferences.

Impact Analysis

The vulnerability could cause system instability or crashes due to null pointer dereferences in the AMD display driver. This may affect the display functionality on affected Linux systems, potentially leading to denial of service or degraded user experience.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-40354. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart