CVE-2025-71305

A flaw was found in the Linux kernel's DisplayPort Multi-Stream Transport (MST) subsystem. When a DisplayPort 2.1 monitor is disconnected, a timing issue can cause the Virtual Channel Packet Interval (VCPI) value to become zero. Subsequent operations attempting to use this zero value in a bit shift can lead to a "shift-out-of-bounds" error, potentially resulting in system instability or a denial of service.

A shift-out-of-bounds condition in the DRM DisplayPort MST path can occur when delayed_destroy_work runs after a DP 2.1 monitor disconnect and payload vcpi becomes 0. The code then evaluates BIT(vcpi - 1), which creates a negative shift exponent and triggers UBSAN. For the CVSS the PR:N because physical hotplug triggering does not require an authenticated local user account, although it requires physical access to the display path. The issue is not network reachable and is tied to DisplayPort MST hotplug or disconnect behavior. Impact is mainly denial of service or display stack disruption, with higher availability impact only on systems where UBSAN or warning conditions can panic the kernel.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.