AZL-67010
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-67010.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-67010
- Upstream
- Published
- 2025-09-05T18:15:43Z
- Modified
- 2026-04-01T05:21:06.647255Z
- Summary
- CVE-2025-39675 affecting package kernel for versions less than 6.6.104.2-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null pointer check in modhdcphdcp1createsession()
The function modhdcphdcp1createsession() calls the function getfirstactive_display(), but does not check its return value. The return value is a null pointer if the display list is empty. This will lead to a null pointer dereference.
Add a null pointer check for getfirstactivedisplay() and return MODHDCPSTATUSDISPLAYNOTFOUND if the function return null.
This is similar to the commit c3e9826a2202 ("drm/amd/display: Add null pointer check for getfirstactive_display()").
(cherry picked from commit 5e43eb3cd731649c4f8b9134f857be62a416c893)
- References