CVE-2025-38362

drm/amd/display: Add null pointer check for get_first_active_display()

State: Published
Severity: Not scored
Published: Jul 25, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add null pointer check for get_first_active_display()

The function mod_hdcp_hdcp1_enable_encryption() calls the function get_first_active_display(), but does not check its return value. The return value is a null pointer if the display list is empty. This will lead to a null pointer dereference in mod_hdcp_hdcp2_enable_encryption().

Add a null pointer check for get_first_active_display() and return MOD_HDCP_STATUS_DISPLAY_NOT_FOUND if the function return null.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2deade5ede56581722c0d7672f28b09548dc0fc4 to before 34d3e10ab905f06445f8dbd8a3d9697095e71baeAffected 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 1ebcdf38887949def1a553ff3e45c98ed95a3cd0Affected 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 5148c7ea69e9c5bf2f05081190f45ba96d3d1e7aAffected 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 4ce9f2dc9ff7cc410e8c5d936ec551e26b9599a9Affected 2deade5ede56581722c0d7672f28b09548dc0fc4 to before b3005145eab98d36777660b8893466e4f630ae1cAffected 2deade5ede56581722c0d7672f28b09548dc0fc4 to before c3e9826a22027a21d998d3e64882fa377b613006Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.15.187 through 5.15.Not affected 6.1.143 through 6.1.Not affected 6.6.96 through 6.6.Not affected 6.12.36 through 6.12.Not affected 6.15.5 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

2deade5ede56581722c0d7672f28b09548dc0fc4 to before 34d3e10ab905f06445f8dbd8a3d9697095e71baeAffected
2deade5ede56581722c0d7672f28b09548dc0fc4 to before 1ebcdf38887949def1a553ff3e45c98ed95a3cd0Affected
2deade5ede56581722c0d7672f28b09548dc0fc4 to before 5148c7ea69e9c5bf2f05081190f45ba96d3d1e7aAffected
2deade5ede56581722c0d7672f28b09548dc0fc4 to before 4ce9f2dc9ff7cc410e8c5d936ec551e26b9599a9Affected
2deade5ede56581722c0d7672f28b09548dc0fc4 to before b3005145eab98d36777660b8893466e4f630ae1cAffected
2deade5ede56581722c0d7672f28b09548dc0fc4 to before c3e9826a22027a21d998d3e64882fa377b613006Affected

LinuxLinux

5.8Affected
before 5.8Not affected
5.15.187 through 5.15.*Not affected
6.1.143 through 6.1.*Not affected
6.6.96 through 6.6.*Not affected
6.12.36 through 6.12.*Not affected
6.15.5 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.