Linux Kernel Null Pointer Dereference Vulnerability in AMD Display Driver

Vulnerability

A potential null pointer dereference vulnerability has been addressed in the Linux kernel's AMD display driver. This issue was found in the 'dm_resume' function, where it was assumed that 'aconnector->dc_link' would never be null. The vulnerability could lead to a null dereference, causing a crash or undefined behavior. The issue has been fixed by adding a check for a null 'dc_link' at the beginning of the loop, allowing the function to skip further processing for connectors without a valid link.

Impact

The vulnerability could lead to a null pointer dereference, causing a crash or undefined behavior in the system.

Reproduction

The vulnerability can be reproduced by using a version of the Linux kernel prior to the patch that addresses this issue, with a graphics card that requires the AMD display driver. When the 'dm_resume' function is called, the absence of a valid 'dc_link' for a connector can lead to a null pointer dereference.

Remediation

Users can upgrade to the latest version of the Linux kernel to address this vulnerability.

Added: Oct 7, 2025, 6:20 PM
Updated: Oct 7, 2025, 6:20 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.7
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.