CVE-2025-21990 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing. (cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)
A vulnerability in the Linux kernel's AMD GPU driver can lead to a NULL pointer dereference. This issue arises because certain buffer objects (BOs) may not have a backing store, resulting in a NULL resource reference. The vulnerability has been addressed by adding a NULL check before accessing the resource, preventing potential crashes or undefined behavior.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/6cc30748e17ea2a64051ceaf83a8372484e597f1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/72235808eabea93055b459a63443bd9cd6b08aa4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/af23e39b9e9280b1f6299b6f2fa090a1694240ad | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
| CWE-476 | NULL Pointer Dereference | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.11, < 6.12.20 >= 6.13, < 6.13.8 6.14 rc1 6.14 rc2 6.14 rc3 6.14 rc4 6.14 rc5 6.14 rc6 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 1, 2025 | CVE Modified | CISA-ADP |
| Apr 10, 2025 | Initial Analysis | [email protected] |
| Apr 2, 2025 | New CVE Received | kernel.org |