CVE-2025-39675
- Source
- https://cve.org/CVERecord?id=CVE-2025-39675
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39675.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-39675
- Downstream
- Related
- Published
- 2025-09-05T17:20:41.179Z
- Modified
- 2026-05-28T03:54:26.554126568Z
- Summary
- drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null pointer check in modhdcphdcp1createsession()
The function modhdcphdcp1createsession() calls the function getfirstactive_display(), but does not check its return value. The return value is a null pointer if the display list is empty. This will lead to a null pointer dereference.
Add a null pointer check for getfirstactivedisplay() and return MODHDCPSTATUSDISPLAYNOTFOUND if the function return null.
This is similar to the commit c3e9826a2202 ("drm/amd/display: Add null pointer check for getfirstactive_display()").
(cherry picked from commit 5e43eb3cd731649c4f8b9134f857be62a416c893)
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39675.json", "cna_assigner": "Linux" }- References
-
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html
- https://git.kernel.org/stable/c/2af45aadb7b5d3852c76e2d1e985289ada6f48bf
- https://git.kernel.org/stable/c/2ee86b764c54e0d6a5464fb023b630fdf20869cd
- https://git.kernel.org/stable/c/7a2ca2ea64b1b63c8baa94a8f5deb70b2248d119
- https://git.kernel.org/stable/c/857b8387a9777e42b36e0400be99b54c251eaf9a
- https://git.kernel.org/stable/c/97fc94c5fd3c6ac5a13e457d38ee247737b8c4bd
- https://git.kernel.org/stable/c/ee0373b20bb67b1f00a1b25ccd24c8ac996b6446
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39675.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-39675
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced2deade5ede56581722c0d7672f28b09548dc0fc4Fixed2af45aadb7b5d3852c76e2d1e985289ada6f48bfFixedee0373b20bb67b1f00a1b25ccd24c8ac996b6446Fixed857b8387a9777e42b36e0400be99b54c251eaf9aFixed97fc94c5fd3c6ac5a13e457d38ee247737b8c4bdFixed2ee86b764c54e0d6a5464fb023b630fdf20869cdFixed7a2ca2ea64b1b63c8baa94a8f5deb70b2248d119