CVE-2025-21987

MEDIUM

Linux Kernel 6.10-6.12.17, 6.13.0-6.13.5 - Use of Uninitialized Resource in amdgpu_ttm_clear_buffer

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: init return value in amdgpu_ttm_clear_buffer Otherwise an uninitialized value can be returned if amdgpu_res_cleared returns true for all regions. Possibly closes: https://gitlab.freedesktop.org/drm/amd/-/issues/3812 (cherry picked from commit 7c62aacc3b452f73a1284198c81551035fac6d71)

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/d2c9625b0ade41f9917875d88173a0cc802b95fc

Patch

https://git.kernel.org/stable/c/5bd98c2df4a0f2e2dcbdf563feb8d348406377b5

Patch

https://git.kernel.org/stable/c/d3c7059b6a8600fc62cd863f1ea203b8675e63e1

Scores

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 4.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-908

Status published

Products (12)

linux/Kernel 6.10.0 - 6.12.18linux

linux/Kernel 6.13.0 - 6.13.6linux

Linux/Linux < 6.10

Linux/Linux 6.10

Linux/Linux 6.12.18 - 6.12.*

Linux/Linux 6.13.6 - 6.13.*

Linux/Linux 6.14

Linux/Linux a68c7eaa7a8ffdec9287ba1561a668d674c20a13 - 5bd98c2df4a0f2e2dcbdf563feb8d348406377b5

Linux/Linux a68c7eaa7a8ffdec9287ba1561a668d674c20a13 - d2c9625b0ade41f9917875d88173a0cc802b95fc

Linux/Linux a68c7eaa7a8ffdec9287ba1561a668d674c20a13 - d3c7059b6a8600fc62cd863f1ea203b8675e63e1

... and 2 more

Published Apr 02, 2025

Tracked Since Feb 18, 2026