NetSight
medium5.5

CVE-2025-38362

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for get_first_active_display() The function mod_hdc…

Impact

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for get_first_active_display() The function mod_hdcp_hdcp1_enable_encryption() calls the function get_first_active_display(), but does not check its return value. The return value is a null pointer if the display list is empty. This will lead to a null pointer dereference in mod_hdcp_hdcp2_enable_encryption(). Add a null pointer check for get_first_active_display() and return MOD_HDCP_STATUS_DISPLAY_NOT_FOUND if the function return null.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.8 before 5.15.187
from 5.16 before 6.1.143
from 6.2 before 6.6.96
from 6.7 before 6.12.36
from 6.13 before 6.15.5
DebianDebian Linux
Version 11.0

Weakness classification

References