CVE-2025-39675

drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()

State
Published
Severity
Not scored
Published
Sep 5, 2025
Updated
May 12, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()

The function mod_hdcp_hdcp1_create_session() calls the function get_first_active_display(), but does not check its return value. The return value is a null pointer if the display list is empty. This will lead to a null pointer dereference.

Add a null pointer check for get_first_active_display() and return MOD_HDCP_STATUS_DISPLAY_NOT_FOUND if the function return null.

This is similar to the commit c3e9826a2202 ("drm/amd/display: Add null pointer check for get_first_active_display()").

(cherry picked from commit 5e43eb3cd731649c4f8b9134f857be62a416c893)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 2af45aadb7b5d3852c76e2d1e985289ada6f48bfAffected
  • 2deade5ede56581722c0d7672f28b09548dc0fc4 to before ee0373b20bb67b1f00a1b25ccd24c8ac996b6446Affected
  • 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 857b8387a9777e42b36e0400be99b54c251eaf9aAffected
  • 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 97fc94c5fd3c6ac5a13e457d38ee247737b8c4bdAffected
  • 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 2ee86b764c54e0d6a5464fb023b630fdf20869cdAffected
  • 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 7a2ca2ea64b1b63c8baa94a8f5deb70b2248d119Affected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.15.190 through 5.15.*Not affected
  • 6.1.149 through 6.1.*Not affected
  • 6.6.103 through 6.6.*Not affected
  • 6.12.44 through 6.12.*Not affected
  • 6.16.4 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.