CVE-2025-39906
kernel: drm/amd/display: remove oem i2c adapter on finish
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · October 1, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: remove oem i2c adapter on finish
Fixes a bug where unbinding of the GPU would leave the oem i2c adapter registered resulting in a null pointer dereference when applications try to access the invalid device.
(cherry picked from commit 89923fb7ead4fdd37b78dd49962d9bb5892403e6)
Statement
This vulnerability poses minimal risk to Red Hat products as the affected code path is not present in Red Hat Enterprise Linux kernels. The issue is limited to a local denial-of-service condition triggered when unbinding an AMD graphics processing unit, leaving a dangling I2C adapter structure that causes a kernel crash upon subsequent device access. Supported Red Hat Enterprise Linux releases do not include the upstream change that introduced this defect and are unaffected.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified