Riskcovery

CVE-2025-21968

drm/amd/display: Fix slab-use-after-free on hdcp_work

State
Published
Severity
7.8 High
Published
Apr 1, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix slab-use-after-free on hdcp_work

[Why] A slab-use-after-free is reported when HDCP is destroyed but the property_validate_dwork queue is still running.

[How] Cancel the delayed work when destroying workqueue.

(cherry picked from commit 725a04ba5a95e89c89633d4322430cfbca7ce128)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • da3fd7ac0bcf372cc57117bdfcd725cca7ef975a to before 06acfdef370ae018dad9592369e2d2fd9a40c09eAffected
  • da3fd7ac0bcf372cc57117bdfcd725cca7ef975a to before 1397715b011bcdc6ad91b17df7acaee301e89db5Affected
  • da3fd7ac0bcf372cc57117bdfcd725cca7ef975a to before 4964dbc4191ab436877a5e3ecd9c67a4e50b7c36Affected
  • da3fd7ac0bcf372cc57117bdfcd725cca7ef975a to before 378b361e2e30e9729f9a7676f7926868d14f4326Affected
  • da3fd7ac0bcf372cc57117bdfcd725cca7ef975a to before bac7b8b1a3f1a86eeec85835af106cbdc2b9d9f7Affected
  • da3fd7ac0bcf372cc57117bdfcd725cca7ef975a to before 93d701064e56788663d7c5918fbe5e060d5df587Affected
  • da3fd7ac0bcf372cc57117bdfcd725cca7ef975a to before e65e7bea220c3ce8c4c793b4ba35557f4994ab2bAffected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.236 through 5.10.*Not affected
  • 5.15.180 through 5.15.*Not affected
  • 6.1.132 through 6.1.*Not affected
  • 6.6.84 through 6.6.*Not affected
  • 6.12.20 through 6.12.*Not affected
  • 6.13.8 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.