CVE-2025-38361

EUVD-2025-22642
In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check dce_hwseq before dereferencing it

[WHAT]

hws was checked for null earlier in dce110_blank_stream, indicating hws
can be null, and should be checked whenever it is used.

(cherry picked from commit 79db43611ff61280b6de58ce1305e0b2ecf675ad)
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
4.15 ≤
𝑥
< 6.12.36
linuxlinux_kernel
6.13 ≤
𝑥
< 6.15.5
linuxlinux_kernel
6.16:rc1
linuxlinux_kernel
6.16:rc2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
vulnerable
bookworm (security)
6.1.162-1
fixed
bullseye
vulnerable
bullseye (security)
vulnerable
forky
6.18.9-1
fixed
sid
6.18.12-1
fixed
trixie
6.12.63-1
fixed
trixie (security)
6.12.73-1
fixed
linux-6.1
bullseye (security)
6.1.162-1~deb11u1
fixed
References
https://git.kernel.org/stable/c/5e1482ae14b03b9fca73ef5afea26ede683f4450
https://git.kernel.org/stable/c/60e450eec5d63113c6ad5c456ce64c12b4496a6e
https://git.kernel.org/stable/c/b669507b637eb6b1aaecf347f193efccc65d756e
https://git.kernel.org/stable/c/df11bf0ef795b6d415c4d8ee54fa3f2105e75bcb
https://git.kernel.org/stable/c/e881b82f5d3d8d54d168cd276169f0fee01bf0e7