CVE-2025-21941

drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

State: Published
Severity: 5.5 Medium
Published: Apr 1, 2025
Updated: May 11, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

Null pointer dereference issue could occur when pipe_ctx->plane_state is null. The fix adds a check to ensure 'pipe_ctx->plane_state' is not null before accessing. This prevents a null pointer dereference.

Found by code review.

(cherry picked from commit 63e6a77ccf239337baa9b1e7787cde9fa0462092)

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before 265422915416468ba91bffa56addbff45e18342aAffected 3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before f435192e00bc4d5d4134356b93212670ec47fa8dAffected 3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before c1e54752dc12e90305eb0475ca908f42f5b369caAffected 3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before 3b3c2be58d5275aa59d8b4810a59f173f2f5bac1Affected 3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before e0345c3478f185ca840daac7f08a1fcd4ebec3e9Affected 3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before 3748fad09d89e9a5290e1738fd6872a79f794743Affected 3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before 374c9faac5a763a05bc3f68ad9f73dab3c6aec90Affected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.236 through 5.10.Not affected 5.15.180 through 5.15.Not affected 6.1.131 through 6.1.Not affected 6.6.83 through 6.6.Not affected 6.12.19 through 6.12.Not affected 6.13.7 through 6.13.Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before 265422915416468ba91bffa56addbff45e18342aAffected
3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before f435192e00bc4d5d4134356b93212670ec47fa8dAffected
3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before c1e54752dc12e90305eb0475ca908f42f5b369caAffected
3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before 3b3c2be58d5275aa59d8b4810a59f173f2f5bac1Affected
3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before e0345c3478f185ca840daac7f08a1fcd4ebec3e9Affected
3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before 3748fad09d89e9a5290e1738fd6872a79f794743Affected
3be5262e353b8ab97c528bfc7d0dd3c820e4ba27 to before 374c9faac5a763a05bc3f68ad9f73dab3c6aec90Affected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.236 through 5.10.*Not affected
5.15.180 through 5.15.*Not affected
6.1.131 through 6.1.*Not affected
6.6.83 through 6.6.*Not affected
6.12.19 through 6.12.*Not affected
6.13.7 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.