CVE-2025-21985 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses [WHAT & HOW] hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAX_HPO_DP2_ENCODERS. Similiarly, disp_cfg_stream_location can be used as an array index which should be 0..5, so the ASSERT's conditions should be less without equal.
A vulnerability allowing out-of-bounds access has been identified in the Linux kernel's AMD display driver. The issue arises because the 'hpo_stream_to_link_encoder_mapping' can have a size of up to 4, while the corresponding location can extend up to 6. This discrepancy necessitates a check to ensure the location does not exceed the maximum encoder size. Additionally, the 'disp_cfg_stream_location' can be used as an array index, which should range from 0 to 5, indicating that the ASSERT conditions should be adjusted to be less than or equal to 5.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/36793d90d76f667d26c6dd025571481ee0c96abc | kernel.org | Patch |
| https://git.kernel.org/stable/c/8adbb2a98b00926315fd513b5fe2596b5716b82d | kernel.org | Patch |
| https://git.kernel.org/stable/c/9aedc776b11038f04f4641241bb7e877781e4aa4 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.15, < 6.12.20 >= 6.13, < 6.13.8 6.14 rc1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 30, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 30, 2025 | Initial Analysis | [email protected] |
| Apr 1, 2025 | New CVE Received | kernel.org |