CVE-2025-68190

drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()

State: Published
Severity: Not scored
Published: Dec 16, 2025
Updated: Oct 3, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()

kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a potential NULL pointer dereference in atom_get_src_int() when accessing WS entries.

Return -ENOMEM on allocation failure to avoid the NULL dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 0b52e3192181b4de58844faedd2928e5c6ca0e06Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 47252c7d5559d8776ad336be9c955d8404e7ae69Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 88d198836f628c57536c6c71d13e90c5d15fbf1aAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 73853208a497a036596dcf9efbff8ce927651d3aAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 35f3fb86bb0158a298d6834e7e110dcaf07f490cAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 997e28d3d00a1d30649629515e4402612921205bAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before cc9a8e238e42c1f43b98c097995137d644b69245Affected
LinuxLinux	4.2Affected before 4.2Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.58 through 6.12.Not affected 6.17.8 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 0b52e3192181b4de58844faedd2928e5c6ca0e06Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 47252c7d5559d8776ad336be9c955d8404e7ae69Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 88d198836f628c57536c6c71d13e90c5d15fbf1aAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 73853208a497a036596dcf9efbff8ce927651d3aAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 35f3fb86bb0158a298d6834e7e110dcaf07f490cAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 997e28d3d00a1d30649629515e4402612921205bAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before cc9a8e238e42c1f43b98c097995137d644b69245Affected

LinuxLinux

4.2Affected
before 4.2Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.58 through 6.12.*Not affected
6.17.8 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.