CVE Database›CVE-2025-38098

CVE-2025-38098

kernel: drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 3, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink

Don't try to operate on a drm_wb_connector as an amdgpu_dm_connector. While dereferencing aconnector->base will "work" it's wrong and might lead to unknown bad things. Just... don't.

Statement

This vulnerability does not affect supported Red Hat Enterprise Linux releases because the vulnerable code introduced in upstream display driver components is not present in shipped kernels. The underlying issue involves improper handling of virtual display writeback connectors within the AMD graphics subsystem, which would otherwise require local system access and specific graphical hardware to trigger. Consequently, Red Hat enterprise environments are not exposed to stability or security risks from this flaw.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified