CVE-2025-38098

MEDIUM

Linux Kernel AMD Display Driver - Memory Corruption

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink Don't try to operate on a drm_wb_connector as an amdgpu_dm_connector. While dereferencing aconnector->base will "work" it's wrong and might lead to unknown bad things. Just... don't.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/b14e726d57f61085485f107a6203c50a09695abd

Patch

https://git.kernel.org/stable/c/18ca68f7c657721583a75cab01f0d0d2ec63a6c9

Patch

https://git.kernel.org/stable/c/cbf4890c6f28fb1ad733e14613fbd33c2004bced

Scores

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 5.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (13)

linux/Kernel 6.13.0 - 6.14.9linux

linux/Kernel 6.8.0 - 6.12.31linux

Linux/Linux < 6.8

Linux/Linux 0fe85301b95077ac4fa4a91909d38b7341e81187

Linux/Linux 6.12.31 - 6.12.*

Linux/Linux 6.14.9 - 6.14.*

Linux/Linux 6.15

Linux/Linux 6.7.2 - 6.8

Linux/Linux 6.8

Linux/Linux dbf5d3d02987faa0eec3710dd687cd912362d7b5 - 18ca68f7c657721583a75cab01f0d0d2ec63a6c9

... and 3 more

Published Jul 03, 2025

Tracked Since Feb 18, 2026