BaseFortify

Publication date: 2025-12-16

Last updated on: 2025-12-18

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Cache streams targeting link when performing LT automation [WHY] Last LT automation update can cause crash by referencing current_state and calling into dc_update_planes_and_stream which may clobber current_state. [HOW] Cache relevant stream pointers and iterate through them instead of relying on the current_state.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-16

Last Modified

2025-12-18

Generated

2026-07-06

AI Q&A

2025-12-16

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68196

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's drm/amd/display component involves the last LT automation update causing a crash. The issue arises because the code references current_state and calls dc_update_planes_and_stream, which may overwrite or clobber current_state. The fix involves caching relevant stream pointers and iterating through them instead of relying directly on current_state.

Impact Analysis

The vulnerability can cause the Linux kernel to crash when performing LT automation in the AMD display driver. This could lead to system instability or downtime on affected systems using this component.

Hi! I’m here to help you understand CVE-2025-68196. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70