CVE-2025-40354

drm/amd/display: increase max link count and fix link->enc NULL pointer access

State: Published
Severity: 7.8 High
Published: Dec 16, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: increase max link count and fix link->enc NULL pointer access

[why] 1.) dc->links[MAX_LINKS] array size smaller than actual requested. max_connector + max_dpia + 4 virtual = 14. increase from 12 to 14.

2.) hw_init() access null LINK_ENC for dpia non display_endpoint.

(cherry picked from commit d7f5a61e1b04ed87b008c8d327649d184dc5bb45)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f28092be4e12b7df9e4f415d25bf0d767bc2d9edAffected 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before a3fc0d36cfb927f8986b83bf5fba47dbedad3c63Affected 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before bec947cbe9a65783adb475a5fb47980d7b4f4796Affected
LinuxLinux	4.15Affected before 4.15Not affected 6.12.56 through 6.12.Not affected 6.17.6 through 6.17.Not affected 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.