SUSE-SU-2025:20285-1 Security update for kernel-livepatch-MICRO-6-0_Update_2

This update for kernel-livepatch-MICRO-6-0Update2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. bsc1235916 - CVE-2024-46818: Fixed drm/amd/display: check gpioid before used as array index bsc1231204 - CVE-2024-46815: Fixed drm/amd/display: check numvalidsets...

CVE-2025-22093

Summary (CVE-2025-22093) The Linux kernel DRM for AMD displays had a NULL pointer dereference risk when DMUB is unsupported on the ASIC. Specifically, ctx->dmub_srv could be NULL (tested in dm_dmub_sw_init) but was dereferenced in dmub_hw_lock_mgr_cmd if should_use_dmub_lock returned true. The...

CVE-2025-22093 drm/amd/display: avoid NPD when ASIC does not support DMUB

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid NPD when ASIC does not support DMUB ctx-dmubsrv will de NULL if the ASIC does not support DMUB, which is tested in dmdmubswinit. However, it will be dereferenced in dmubhwlockmgrcmd if shouldusedmublock...

CVE-2025-22093

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid NPD when ASIC does not support DMUB ctx-dmubsrv will de NULL if the ASIC does not support DMUB, which is tested in dmdmubswinit. However, it will be dereferenced in dmubhwlockmgrcmd if shouldusedmublock...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference in the AMD display driver when the ASIC does not support DMUB...

Vulnerability in the definition of the structure vba_vars_st{} in the drivers/gpu/drm/amd/display/dc/dml/display_mode_vba.h file – a driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. This vulnerability allows attackers to cause system failures.

The vulnerability in the definition of the structure vbavarsst in the drivers/gpu/drm/amd/display/dc/dml/displaymodevba.h module exists. This vulnerability is related to unvalidated array indexing in the driver that supports Direct Rendering Infrastructure DRI for AMD graphics cards in Linux-base...

The vulnerability of the dcn_bw_update_from_pplib_fclks() function in the DRI driver for AMD Linux kernel-based video cards allows a hacker to cause a service failure.

The vulnerability of the dcnbwupdatefrompplibfclks function in the DRI driver for AMD kernel-based Linux operating system-related graphics cards is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-21985

CVE-2025-21985 : In the Linux kernel DRM/AMD display path, the fix addresses out-of-bounds accesses. Specifically, hpo_stream_to_link_encoder_mapping is sized MAX_HPO_DP2_ENCODERS(=4) but can reference up to 6 elements, so the location must be checked against MAX_HPO_DP2_ENCODERS. Also, disp_cfg_...

CVE-2025-21985

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses WHAT & HOW hpostreamtolinkencodermapping has size MAXHPODP2ENCODERS=4, but location can have size up to 6. As a result, it is necessary to check location against MAXHPODP2ENCODERS...

CVE-2025-21968

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free on hdcpwork Why A slab-use-after-free is reported when HDCP is destroyed but the propertyvalidatedwork queue is still running. How Cancel the delayed work when destroying workqueue. cherry...

CVE-2025-21956

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalizedpixclk when color depth = 14 WHY & HOW A warning message "WARNING: CPU: 4 PID: 459 at ... /dcresource.c:3397 calculatephypixclks+0xef/0x100 amdgpu" occurs because the displaycolordepth ==...

CVE-2025-21941 drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipectx-planestate in resourcebuildscalingparams Null pointer dereference issue could occur when pipectx-planestate is null. The fix adds a check to ensure 'pipectx-planestate' is not null befo...

Vulnerability of the amdgpu_dm_atomic_check() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c file – This driver is part of the Linux operating system’s AMD graphics card Direct Rendering Infrastructure (DRI) support module. It allows a hacker to trigger a service failure.

Vulnerability of the amdgpudmatomiccheck function in the driver/gpu/drm/amd/display/amdgpudm/amdgpudm.c file – The driver for Linux operating system graphics cards that support Direct Rendering Infrastructure DRI is vulnerable due to a pointer issue related to NULL pointers. Exploiting this...

NVIDIA GPU Display Driver January 2025 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows, which might allow information disclosure, denial of service, and data tampering. NVIDIA has released updates to mitigate these vulnerabilities. NVIDIA has released updates to...

USN-7380-1 linux-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

USN-7379-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

The vulnerability of the are_stream_backends_same() function in the drivers/gpu/drm/amd/display/dc/core/dc_resource.c file of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the arestreambackendssame function in the drivers/gpu/drm/amd/display/dc/core/dcresource.c file of the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `dc_allow_idle_optimizations()` function in the drivers/gpu/drm/amd/display/dc/core/dc.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dcallowidleoptimizations function in the drivers/gpu/drm/amd/display/dc/core/dc.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `commit_planes_for_stream()` function in the drivers/gpu/drm/amd/display/dc/core/dc.c kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the commitplanesforstream function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dml2_calculate_rq_and_dlg_params() function in the drivers/gpu/drm/amd/display/dc/dml2/dml2_utils.c kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dml2calculaterqanddlgparams function in the drivers/gpu/drm/amd/display/dc/dml2/dml2utils.c module of the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...