CVE-2025-21987 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: init return value in amdgpu_ttm_clear_buffer Otherwise an uninitialized value can be returned if amdgpu_res_cleared returns true for all regions. Possibly closes: https://gitlab.freedesktop.org/drm/amd/-/issues/3812 (cherry picked from commit 7c62aacc3b452f73a1284198c81551035fac6d71)
A vulnerability in the AMD GPU driver of the Linux kernel has been addressed. The issue was related to the handling of buffer management, where an uninitialized value could be returned. This occurred in the 'amdgpu_ttm_clear_buffer' function, specifically if 'amdgpu_res_cleared' indicated that all regions were cleared. The vulnerability could lead to the improper initialization of return values, potentially causing unintended behavior in the driver.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/5bd98c2df4a0f2e2dcbdf563feb8d348406377b5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d2c9625b0ade41f9917875d88173a0cc802b95fc | kernel.org | Patch |
| https://git.kernel.org/stable/c/d3c7059b6a8600fc62cd863f1ea203b8675e63e1 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-908 | Use of Uninitialized Resource | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.10, < 6.12.18 >= 6.13, < 6.13.6 6.14 rc1 6.14 rc2 6.14 rc3 6.14 rc4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 30, 2025 | Initial Analysis | [email protected] |
| Apr 2, 2025 | New CVE Received | kernel.org |