CVE-2025-21784

MEDIUM

Linux Kernel 6.3-6.6.78, 6.7-6.12.15, 6.13-6.13.3 - Denial of Service via PSP Firmware Load Failure

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode() In function psp_init_cap_microcode(), it should bail out when failed to load firmware, otherwise it may cause invalid memory access.

References (4)

Core 4

Core References

Patch

https://git.kernel.org/stable/c/3f40a7ff39d9f1d283d5aa9b13e2fb16200aff5f

Patch

https://git.kernel.org/stable/c/d1d10bd595539ed82ab59b60249f9bdf0994f678

Patch

https://git.kernel.org/stable/c/e7eb84384335e2abf960c94ec0f8c5b835283777

Patch

https://git.kernel.org/stable/c/a0a455b4bc7483ad60e8b8a50330c1e05bb7bfcf

Scores

CVSS v3 5.5

EPSS 0.0019

EPSS Percentile 9.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (15)

linux/Kernel 6.13.0 - 6.13.4linux

linux/Kernel 6.3.0 - 6.6.79linux

linux/Kernel 6.7.0 - 6.12.16linux

Linux/Linux < 6.3

Linux/Linux 07dbfc6b102e25087ec345ef2c2eae21c9856f17 - 3f40a7ff39d9f1d283d5aa9b13e2fb16200aff5f

Linux/Linux 07dbfc6b102e25087ec345ef2c2eae21c9856f17 - a0a455b4bc7483ad60e8b8a50330c1e05bb7bfcf

Linux/Linux 07dbfc6b102e25087ec345ef2c2eae21c9856f17 - d1d10bd595539ed82ab59b60249f9bdf0994f678

Linux/Linux 07dbfc6b102e25087ec345ef2c2eae21c9856f17 - e7eb84384335e2abf960c94ec0f8c5b835283777

Linux/Linux 6.12.16 - 6.12.*

Linux/Linux 6.13.4 - 6.13.*

... and 5 more

Published Feb 27, 2025

Tracked Since Feb 18, 2026