CVE-2025-21990

drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags

State: Published
Severity: 5.5 Medium
Published: Apr 2, 2025
Updated: May 11, 2026
Reserved: Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags

PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing.

(cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	0cce5f285d9ae81c33993f3270fe77f5e74a69ab to before 72235808eabea93055b459a63443bd9cd6b08aa4Affected 0cce5f285d9ae81c33993f3270fe77f5e74a69ab to before af23e39b9e9280b1f6299b6f2fa090a1694240adAffected 0cce5f285d9ae81c33993f3270fe77f5e74a69ab to before 6cc30748e17ea2a64051ceaf83a8372484e597f1Affected
LinuxLinux	6.11Affected before 6.11Not affected 6.12.20 through 6.12.Not affected 6.13.8 through 6.13.Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.