Riskcovery

CVE-2025-21780

drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()

State
Published
Severity
7.8 High
Published
Feb 27, 2025
Updated
Oct 15, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()

It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

ProductVersions
LinuxLinux
  • 137d63abbf6a0859e79b662e81d21170ecb75e59 to before 3484ea33157bc7334f57e64826ec5a4bf992151aAffected
  • 137d63abbf6a0859e79b662e81d21170ecb75e59 to before e43a8b9c4d700ffec819c5043a48769b3e7d9cabAffected
  • 137d63abbf6a0859e79b662e81d21170ecb75e59 to before 2498d2db1d35e88a2060ea191ae75dce853dd084Affected
  • 137d63abbf6a0859e79b662e81d21170ecb75e59 to before 231075c5a8ea54f34b7c4794687baa980814e6deAffected
  • 137d63abbf6a0859e79b662e81d21170ecb75e59 to before 1abb2648698bf10783d2236a6b4a7ca5e8021699Affected
LinuxLinux
  • 5.2Affected
  • before 5.2Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.79 through 6.6.*Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.