CVE-2025-21956

MEDIUM

Linux Kernel - Denial of Service via Unhandled Color Depth in DRM AMD Display

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalized_pix_clk when color depth = 14 [WHY & HOW] A warning message "WARNING: CPU: 4 PID: 459 at ... /dc_resource.c:3397 calculate_phy_pix_clks+0xef/0x100 [amdgpu]" occurs because the display_color_depth == COLOR_DEPTH_141414 is not handled. This is observed in Radeon RX 6600 XT. It is fixed by assigning pix_clk * (14 * 3) / 24 - same as the rests. Also fixes the indentation in get_norm_pix_clk. (cherry picked from commit 274a87eb389f58eddcbc5659ab0b180b37e92775)

References (10)

Core 10
Core References

Scores

CVSS v3 5.5
EPSS 0.0020
EPSS Percentile 10.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (27)
linux/Kernel 4.15.0 - 5.4.292linux
linux/Kernel 5.11.0 - 5.15.180linux
linux/Kernel 5.16.0 - 6.1.132linux
linux/Kernel 5.5.0 - 5.10.236linux
linux/Kernel 6.13.0 - 6.13.8linux
linux/Kernel 6.2.0 - 6.6.84linux
linux/Kernel 6.7.0 - 6.12.20linux
Linux/Linux < 4.15
Linux/Linux 4.15
Linux/Linux 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c - 0174a2e5770efee9dbd4b58963ed4d939298ff5e
... and 17 more
Published Apr 01, 2025
Tracked Since Feb 18, 2026